From the course: CSSLP Cert Prep: 6 Secure Lifecycle Management

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

Promote security culture

Promote security culture

From the course: CSSLP Cert Prep: 6 Secure Lifecycle Management

Start my 1-month free trial

Promote security culture

- Ultimately you'll want secure software lifecycle management to be inherent to your organization and not something imposed externally. You can accomplish this by developing security champions as well as providing security education and guidance. As the CSSLP in the room your job isn't to do all of this work by yourself your job is to get things started and to build momentum. You'll do your fair share of the work but the end goal is to get others within your organization to take that same sense of ownership that you do about your application's security posture. The people you'll engage first are going to be your security champions. Think of them as members of your extended security team. They don't officially report to you or your manager but they're your primary context throughout the organization who understand both what you do from a security standpoint and what their teammates do from a day-to-day standpoint. When I was…

Contents