January 29, 2020
Application security leaders are increasingly developing formal security champion programs that help their companies better embed security expertise and accountability across development and DevOps teams. Security champions are developers, architects, and engineers who take the lead within their teams and projects on security objectives.
"A security champion is fundamentally an enabler and promoter of application security best practices," says Shawn Asmus, director of threat management for Optiv. "They help promote the adoption of tools and standards, as well as consult with developers regarding testing results and proposed remediations."
Security champions pursue advanced training and are an extra resource for their peers to answer security-related questions. They work with the security team to set realistic requirements for their peers, to more effectively choose and integrate security tools that mesh with development workflows, and to ensure that dev teams are making good on their security promises.
We recently surveyed some experts to get perspective on what security champions need to succeed in their roles. Here's what they had to say.
About the Author(s)
You May Also Like
Hacking Your Digital Identity: How Cybercriminals Can and Will Get Around Your Authentication MethodsOct 26, 2023
Modern Supply Chain Security: Integrated, Interconnected, and Context-DrivenNov 06, 2023
How to Combat the Latest Cloud Security ThreatsNov 06, 2023
Reducing Cyber Risk in Enterprise Email Systems: It's Not Just Spam and PhishingNov 01, 2023
SecOps & DevSecOps in the CloudNov 06, 2023
9 Traits You Need to Succeed as a Cybersecurity Leader
The Ultimate Guide to the CISSP
Modernize your Security Operations with Human-Machine Intelligence
Protecting Critical Infrastructure: The 2021 Energy, Utilities, and Industrials Cyber Threat Landscape Report
Business Buyers Guide to Password Managers