Triangle InfoSeCon 2020

This presentation will cover my experiences over the past 5 years building a secure software development lifecycle program within Research & Development at SAS Institute. I will discuss steps taken to get some initial practices and workflows in place. Following this the introduction of security tooling and building of a Security Champions network. Strategies for capturing metrics and using them to mature the program will also be covered. Finally, the presentation will conclude with a summary of tips and lessons learned along the way.

Steve Hart (Head of Product Security at SAS Institute)
Steve Hart, CISSP, CSSLP, CCSP is the Head of Product Security in Research and Development at SAS Institute. He leads initiatives to ensure secure software development practices are embedded within the lifecycle of SAS products.

свернуть