CISO Tradecraft®
#216 - The TTPs of a Security Champions Program (with Dustin Lehr)
Jan 20, 2025
Dustin Lehr, a software engineer and expert in cybersecurity and application security, shares his insights on building security champions in development teams. He discusses the impact of culture change on security practices and the key differences between leadership and management. Learn about effective recruitment strategies for security champions and the importance of defining vision and goals. The conversation also explores the role of gamification to enhance engagement and motivation, providing actionable steps for a robust security champions program.
45:32
Episode guests
AI Summary
AI Chapters
Episode notes
Podcast summary created with Snipd AI
Quick takeaways
- Establishing security champions within development teams fosters a culture of security awareness, enhancing the organization's overall security posture through proactive practices.
- Effective leadership and peer influence in security champion programs motivate developers to engage with security initiatives without requiring formal titles or mandates.
Deep dives
Creating Security Champions in Development Teams
Building a robust security culture within development teams involves establishing security champions—developers who advocate for and implement security best practices. These champions play a crucial role in fostering a culture of security awareness by identifying vulnerabilities and encouraging their peers to prioritize secure coding practices. Their motivation often stems from a desire to enhance the quality of software and to see changes within their development environment. Cultivating this role not only helps the developers to become proactive in addressing security issues but also strengthens the overall security posture of the organization.
Remember Everything You Learn from Podcasts
Save insights instantly, chat with episodes, and build lasting knowledge - all powered by AI.
