CISO Tradecraft®

#161 - Secure Developer Training Programs (with Scott Russo) Part 2


Listen Later

In the second half of the discussion about secure developer training programs, G Mark Hardy and Scott Russo delve deeper into how to engineer an effective cybersecurity course. They discuss the importance and impact of automation and shifting left, the customization needed for different programming languages and practices, and the role of gamification in engagement and learning. The conversation also touches upon anticipating secular trends, compliance with privacy and data protection regulations, different leaning styles and preferences, and effective strategies to enhance courses based on participant feedback. Scott highlights the lasting impacts and future implications of secure developer training, especially with the advent of generative AI in code generation.

ISACA Event (10 Jan 2024) With G Mark Hardy - https://www.cisotradecraft.com/isaca

Transcripts: https://docs.google.com/document/d/1zr09gVpJuZMUMmF9Y-Kc0DOy-1gH0cx-

Chapters

  • 00:00 Introduction
  • 01:08 Importance of Ongoing Support and Mentorship
  • 01:46 The Role of Community in Training
  • 03:03 Hands-on Exercises and Practical Experience
  • 06:01 Success Stories and Testimonials
  • 08:29 Incorporating Security Trends into Training
  • 11:08 Balancing Security with Developer Productivity
  • 18:17 Teaching Secure Coding Practices in Different Languages
  • 20:27 Engaging and Motivating Participants
  • 22:51 Promoting the Program: Engaging and Fun
  • 23:37 Accommodating Different Learning Styles
  • 24:16 Catering to Self-Paced Learners
  • 26:19 Addressing Proficiency Levels and Remediation
  • 28:55 Compliance with Privacy and Data Protection Regulations
  • 30:48 Breaking Down Complex Security Concepts
  • 32:05 Creating a Culture of Security Awareness
  • 33:25 Partnerships and Collaborations in Secure Development
  • 35:10 Feedback and Improvement of the Program
  • 36:12 Cost Considerations for Secure Developer Training
  • 39:20 Tracking Participants' Progress and Completion Rates
  • 41:23 Trends in Secure Developer Training
  • 43:42 Final Thoughts on Secure Developer Training
  • ...more
    View all episodesView all episodes
    Download on the App Store

    CISO Tradecraft®By CISO Tradecraft®

    • 4.8
    • 4.8
    • 4.8
    • 4.8
    • 4.8

    4.8

    48 ratings


    More shows like CISO Tradecraft®

    View all
    Risky Business by Patrick Gray

    Risky Business

    362 Listeners

    SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast) by Johannes B. Ullrich

    SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)

    634 Listeners

    Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec by Jerry Bell and Andrew Kalat

    Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec

    368 Listeners

    Hacked by Hacked

    Hacked

    176 Listeners

    CyberWire Daily by N2K Networks

    CyberWire Daily

    1,011 Listeners

    Smashing Security by Graham Cluley & Carole Theriault

    Smashing Security

    312 Listeners

    Click Here by Recorded Future News

    Click Here

    386 Listeners

    Malicious Life by Malicious Life

    Malicious Life

    923 Listeners

    Darknet Diaries by Jack Rhysider

    Darknet Diaries

    7,852 Listeners

    Cybersecurity Today by Jim Love

    Cybersecurity Today

    142 Listeners

    CISO Series Podcast by David Spark, Mike Johnson, and Andy Ellis

    CISO Series Podcast

    182 Listeners

    Hacking Humans by N2K Networks

    Hacking Humans

    308 Listeners

    Defense in Depth by David Spark, Steve Zalewski, Geoff Belknap

    Defense in Depth

    71 Listeners

    Cyber Security Headlines by CISO Series

    Cyber Security Headlines

    117 Listeners

    Risky Bulletin by risky.biz

    Risky Bulletin

    33 Listeners