Building an Application Security Program from scratch

A guide for software engineers and team leaders

Created by: Derek Fisher
Cybersecurity Leader, Author, Educator, & Speaker

What Will I Learn?

• Why application security is so important to modern software
• Application security tools you can use throughout the development lifecycle
• Threat modeling and risk rating
• Gap analysis on security tools
• Creating a DevSecOps pipeline
• Application security as a service model
• Creating a software security ecosystem that benefits development
• Setting up your program for continuous improvement

Requirements

• Basic understanding of software development and how the companies create software.
• Some business analysis or project management capabilities

Target audience

• For software developers, architects that are responsible for developing software and need to know how to integrate with security tools and processes.
• Scrum masters, team leaders, and project managers who need to understand what the impacts to their teams and processes are based on the security tools and programs that are available
• For leaders in an engineering organization who need to understand how to build an application security program from scratch