Maintainability + Security =

Presented at RVAsec 2017, June 8, 2017, 11 a.m. (50 minutes).

The security and devops culture craze is all around us, even with all this talk though there are differences between security features and the maintainability of a system. This talk will focus on some real world examples of what can go wrong when a system isn't built with maintainability in mind in a security minded culture. We will cover the political positioning battles that emerge, how security leaders can manage risk in these situations, and of course the technical challenges that creep into the picture over time.

Presenters:

• Robert Wood - Simon Data
  Robert Wood is a security technologist, strategic advisor, and speaker. He currently leads the security efforts at Simon Data where he is responsible for security, privacy, compliance, and overall risk management. After working as a consultant for many years, Robert made the switch into building security programs from the ground up, so this training is based on real-world trial and error, real-world experience, and real-world lessons that you can take and apply in your work.

Links:

• https://rvasec2017.sched.com/event/AT3u/maintainability-security-3
• https://infocon.org/cons/RVAsec/RVAsec 2017/Robert Wood - Main'tainability Security.mp4
• https://infocon.org/cons/RVAsec/RVAsec 2017/Robert Wood - Main'tainability Security.eng.srt (subtitles)

Similar Presentations:

• NolaCon 2016 / Evolving Your Office's Security Culture by Selective Breeding of Ideas and Practices
• BSidesSF 2019 / Concrete Steps to Create a Security Culture
• DerbyCon 6.0 Recharge (2016) / Evolving your Office’s Security Culture