Application Security best practices are not static - they need to be adapted and modified to fit the industry, the size of the business, and what assets you need to protect.
In this talk, we will take a journey through different real life scenarios discussing how to place the building blocks of an AppSec program in the right order - and at the right time.