Threat Modeling Unleashed

Today we are joined by Altaz Valani from Security Compass and Hasan Yasar, Technical Director of Continuous Deployment at the Software Engineering Institute, CMU. We will discuss shifting security to the left and being more proactive. Using Top 10 lists is a good starting point. In the long term, however, value is achieved when we use security scenarios to drive out important value propositions.

Today we are joined by Altaz Valani from Security Compass and Andy Woyzbun , Management Consultant at Woyzbun Advisory, to discuss how a CIO drives a cybersecurity strategy. In this podcast, we will talk about clearly defining and communicating security policies; guiding employees to execute these policies; and using guardrails to assess whether security policies are being enforced effectively. Ul...

Today we are joined by Altaz Valani from Security Compass and Spencer Koch, Security Wizard at Reddit, to discuss the importance of a proactive security mindset across the software security life cycle. Proactive often means using tools, but these tools are useful only if they help reduce process overhead. Blindly shifting security responsibilities to tool results in more overhead through false pos...

Today we are joined by Altaz Valani from Security Compass and Lynn Carter , Consultant and former Professor at Carnegie Mellon University, to talk about the importance of clearly identifying security training objectives. In this podcast, we will delve into why it is important to build long-term behavioral changes into your program vision for sustainable security training. A thoughtful approach to...

Today we are joined by Altaz Valani from Security Compass and Malu Septien Milan , President of Cryptopon, to discuss how you can balance software development risk at all levels of an organization. In this podcast, we are exploring the tension between automation and controls with a focus on providing value to the end customer.

Today we are joined by Rohit Sethi from Security Compass and  Dan   Fritsche , Founder, and CEO at Alpine Security Consulting, to talk about balancing speed and risk in payments. In this podcast, Dan will share his experience with security and the continuous need for innovation fueled by customer demand in the payments space.    

Today we are joined by Altaz Valani from Security Compass and Vicky Hailey, Certified Management Consultant at VHG, to discuss how you can tie your software development programs and processes to business value. In this podcast, we will talk about the importance of focusing on customer and stakeholder needs first — only then can we drive out the right software development programs and practices tha...

Listen in on a brief discussion around Privacy and Contact Tracing. Our research team from Security Compass discusses several relevant issues from the need to gain public trust, developing secure apps, data accuracy, and managing the data lifecycle all while trying to balance public safety and utility.

Today we are joined by Kevin Delaney, Director of Solutions Engineering at Security Compass who will share a useful, bite-sized analogy on the importance of fostering meaningful collaboration between security and engineering teams.

Today we are joined by Altaz Valani from Security Compass and Glen Notman, Associate Partner at Citihub, to discuss how we can engage different stakeholders to adopt a balanced development approach. In this podcast, we will go into the details of how the “technical” automation-for-speed perspective is shifting to a “business-centric” perspective of automation-for-balance, which includes risk and s...

In this episode, Security Compass' Altaz Valani is joined by Ayhan Tek, VP of Information Security at Cyber Electra, to discuss how DevOps automation is shifting to include balanced development for software security. As we inject security, risk, and compliance into software development, we will explore how automation can improve product security and time to market.

Today we are joined by Altaz Valani, Director of Insights Research at Security Compass, and Hasan Yasar, Technical Director at the Software Engineering Institute, Carnegie Mellon University, to talk about adding intelligence to our DevOps pipelines. In this podcast, we will go into the details of how we can make smarter use of the data being collected through DevOps pipelines.

We sat down with Rohit Sethi, CEO of Security Compass, to talk about balanced development automation and how it can help organizations develop digital products faster while ensuring security. In this podcast, we will discuss why organizations should not choose between a “fast and risky” and “slow and safe” approach to development – because there’s a better way.

The future of business relies on being digital, but all software deployed needs to be secure and protect privacy. Yet, responsible cybersecurity gets in the way of what any company really wants to do: innovate fast, stay ahead of the competition, and wow customers! In this podcast recorded at  RSA Conference 2020 , Ehsan Foroughi from Security Compass talks about a way of building software that ad...

In this episode, we are in conversation with Ehsan Foroughi from Security Compass about the challenges organizations face with regulatory compliance. In the wake of new cyberattacks and increased device connectivity, organizations are finding it difficult to comply with new regulations. Ehsan will explore how businesses can tackle these challenges in an increasingly competitive world.

Rohit Sethi, CEO of Security Compass, joined The Last Watchdog to discuss the limitations of the current DevSecOps movements -- and how Security Compass can infuse security best practices into the current framework.