Security Champions are a key element of any AppSec team, since they create a cross-functional team focused on Application Security.
What is a Security Champion?
- Security Champions are active members of a team that may help to make decisions about when to engage the Security Team
- Security Champions act as the “voice” of security for the given product or team
- Security Champions assist in the triage of security bugs for their team or area
(see definition here)
The main purpose of this working session is to discuss the role of Security Champions within organizations, and how Security Champions’ skills can best be utilized across organizations. The session will also discuss the need for a better definition of the role of Security Champion.
- How to define Security Champions’ roles, responsibilities, and OKR
- How to create a network of Security Champions
- Forum for Security Champions to share their experiences
- The importance of being supported by the corporate Security Policy
- How to ‘create’ Security Champions?
- How to reward Security Champions?
- Do Security Champions have a path into Application Security profession?
- Is being a Security Champion worth including in your LinkedIn profile?
- What is the Security Champion’s role in Threat Modelling?
- Agreed definition of security champions’ roles, responsibilities, and OKR
- Agreed structure to help companies create networks of security champions
- Creation of a forum for security champions
The target audience for this Working Session is:
- Security Champions
–(please add as much information as possible before the sessions)–
- Draft definition of security champions’ roles, responsibilities, and OKR
- Draft structure to help companies create networks of security champions
- Draft plan for forum for security champions
Related Working Session(s)
- Creating AppSec Talent (next 100k professionals)
- Creating AppSec Teams
- Security Guild vs Security Champions
Back to list of all Working Sessions and Tracks
Edit this page here