The Application Security Podcast

Marisa Fagan - Measuring Security Culture


Listen Later

Marisa Fagan, Head of Product at Katilyst and veteran security culture expert joins us today to  share practical strategies for building and scaling security champions programs that actually work, from designing effective pilots to avoiding common pitfalls that can derail your initiatives. Learn how to motivate developers using the SAPs model (Status, Access, Power, Stuff), why getting management buy-in is crucial before launching, and discover the metrics that truly demonstrate security culture success. Marisa reveals why most programs fail, shares her blueprint for creating sustainable security culture initiatives, and discusses the evolution beyond security champions to include privacy and accessibility programs. 

Resources Mentioned: 

• Security Champion Success Guide: https://securitychampionsuccessguide.org/

 • OWASP Security Champions Guide: securitychampions.owasp.org

 • People-Centric Security book by Lance Hayden 



FOLLOW OUR SOCIAL MEDIA:

➜Twitter: @AppSecPodcast
➜LinkedIn: The Application Security Podcast
➜YouTube: https://www.youtube.com/@ApplicationSecurityPodcast

Thanks for Listening!

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

...more
View all episodesView all episodes
Download on the App Store

The Application Security PodcastBy Chris Romeo and Robert Hurlbut

  • 5
  • 5
  • 5
  • 5
  • 5

5

36 ratings


More shows like The Application Security Podcast

View all
Risky Business by Patrick Gray

Risky Business

372 Listeners

SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast) by Johannes B. Ullrich

SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)

651 Listeners

CyberWire Daily by N2K Networks

CyberWire Daily

1,021 Listeners

Thoughtworks Technology Podcast by Thoughtworks

Thoughtworks Technology Podcast

43 Listeners

Darknet Diaries by Jack Rhysider

Darknet Diaries

8,061 Listeners

Application Security Weekly (Audio) by Security Weekly Productions

Application Security Weekly (Audio)

12 Listeners

Application Security Weekly (Video) by Security Weekly Productions

Application Security Weekly (Video)

4 Listeners

Cybersecurity Today by Jim Love

Cybersecurity Today

179 Listeners

CISO Series Podcast by David Spark, Mike Johnson, and Andy Ellis

CISO Series Podcast

189 Listeners

The Peter Attia Drive by Peter Attia, MD

The Peter Attia Drive

8,487 Listeners

Defense in Depth by David Spark, Steve Zalewski, Geoff Belknap

Defense in Depth

74 Listeners

Cyber Security Headlines by CISO Series

Cyber Security Headlines

139 Listeners

Risky Bulletin by risky.biz

Risky Bulletin

44 Listeners

The Rundown by Public.com

The Rundown

413 Listeners

The Security Table by Izar Tarandach, Matt Coles, and Chris Romeo

The Security Table

2 Listeners