WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
WeAreDevelopers LIVE • Feb 24, 2022

Building Security Champions

Tanya Janca

You can't hire your way out of the cybersecurity talent shortage. Scale application security organically by transforming enthusiastic developers into empowered security champions.

Pause
Mute Enter Fullscreen
#1 about 4 min

Scaling application security to overcome professional shortages

A shortage of security professionals requires scaling application security programs to secure all software applications effectively.

#2 about 4 min

Defining the role of a security champion

Security champions act as internal advocates who bridge the communication gap between security and development teams.

#3 about 7 min

Recruiting and identifying ideal security champions

Attracting passionate volunteers and gaining manager approval yields better results than forcing developers into the role.

#4 about 4 min

Engaging champions through collaboration and trust

Involving champions in incident response and sharing upcoming tools builds a strong, reciprocal working relationship.

#5 about 2 min

Teaching targeted security concepts to champions

Providing concise and relevant training respects their time while ensuring they grasp necessary security policies.

#6 about 2 min

Recognizing security champions for their contributions

Acknowledging efforts through performance reviews and peer validation emphasizes the value of the extra work performed.

#7 about 3 min

Rewarding positive security behaviors and efforts

Providing tangible rewards like training access or early tool previews reinforces continuous strong security practices.

#8 about 4 min

Maintaining program momentum through consistent communication

Regular check-ins and continuous communication prevent the security culture from deteriorating over long periods.

#9 about 4 min

Free resources for building security programs

Online communities, podcasts, and DevOps books provide ongoing self-guided education for securing software applications.

#10 about 4 min

Implementing champion models in small businesses

Short, targeted educational moments during all-staff meetings effectively integrate basic security and privacy into smaller organizations.

#11 about 3 min

How software developers can become champions

Consistently reporting vulnerabilities and showing enthusiasm for internal security projects naturally transitions developers into champion roles.

#12 about 4 min

Allocating security champions across development teams

Assigning one champion per development team ensures contextual security assistance without relying on a rigid company-wide percentage.

#13 about 4 min

Preventing champion burnout and securing management support

Transparent communication regarding real security incidents secures executive support and protects champions from excessive, unsupported workloads.

Matching moments

48 sec

Scaling knowledge through security champions programs

Stefania Chaplin · World Congress 2022

2:46 min

Defining the security champion role in software teams

Tanya Janca · World Congress 2021

4:58 min

Scaling security teams through developer advocates

Tanya Janca · World Congress 2021

5:25 min

Shifting left and creating internal security champion programs

Vandana Verma Sehgal · LIVE

2:39 min

Establishing a center of excellence and security champions

Nazneen Rupawalla · World Congress 2022

3:28 min

Recruiting the right security champions without forcing participation

Tanya Janca · World Congress 2021

More from WeAreDevelopers LIVE

Fake or News - Claude's DNA Discovery, Quick Cloning & Crime on Insta thumbnail
6:07
1 day ago

Fake or News - Claude's DNA Discovery, Quick Cloning & Crime on Insta

Andrew MacLean, Daniel Cranney, Christian Heilmann

WeAreDevelopers LIVE - Playing in Production thumbnail
1:06:40
1 day ago

WeAreDevelopers LIVE - Playing in Production

Andrew MacLean, Daniel Cranney, Christian Heilmann

WeAreDevelopers LIVE - Is CSS Catching Up to Flash? thumbnail
1:03:33
15 days ago

WeAreDevelopers LIVE - Is CSS Catching Up to Flash?

Chris Heilmann, Daniel Cranney, Bramus Van Damme

WeAreDevelopers LIVE - Project Chopin: Make Your Team and Agents Play Along thumbnail
1:21:17
22 days ago

WeAreDevelopers LIVE - Project Chopin: Make Your Team and Agents Play Along

Chris Heilmann, Daniel Cranney, Krzysztof Cieślak

Fake or News - AI Toothbrushes, Carrier Pigeon Tech & Life on Mars - Krzysztof Cieślak thumbnail
4:23
24 days ago

Fake or News - AI Toothbrushes, Carrier Pigeon Tech & Life on Mars - Krzysztof Cieślak

Chris Heilmann, Daniel Cranney

WeAreDevelopers LIVE - Open Source Agent Toolkits thumbnail
1:00:38
29 days ago

WeAreDevelopers LIVE - Open Source Agent Toolkits

Chris Heilmann, Daniel Cranney, Eddie Jaoude

Related videos

Building Security Champions thumbnail
48:02
World Congress 2021 • over 5 years ago

Building Security Champions

Tanya Janca

Secure Code Superstars: Empowering Developers and Surpassing Security Challenges Together thumbnail
23:34
World Congress 2022 • over 4 years ago

Secure Code Superstars: Empowering Developers and Surpassing Security Challenges Together

Stefania Chaplin

Organizational Change Through The Power Of Why - DevSecOps Enablement thumbnail
26:50
World Congress 2022 • over 4 years ago

Organizational Change Through The Power Of Why - DevSecOps Enablement

Nazneen Rupawalla

Security Pitfalls for Software Engineers thumbnail
27:32
World Congress 2023 • about 3 years ago

Security Pitfalls for Software Engineers

Jasmin Azemović

What The Hack is Web App Sec? thumbnail
24:01
Coffee With Developers • over 1 year ago

What The Hack is Web App Sec?

Jackie

Climate vs. Weather: How Do We Sustainably Make Software More Secure? thumbnail
51:41
LIVE • over 4 years ago

Climate vs. Weather: How Do We Sustainably Make Software More Secure?

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.