A client recently asked how they could improve their security culture. It’s not an easy (or even always achievable) task to build the kind of security culture you might want. This post introduces a content series that is intended to help bring security to developer teams.

The Series

The Jemurai Security Culture Campaign Series will be a stream of topical content intended to help developers think about security in a particular area. The content will be available in associated videos, podcasts and blog posts.

  1. Short (1 min) YouTube videos
  2. Podcast audio on:
  3. Blog post content

It will also be integrated into our securityprogram.io platform.

Click here for the first video, an introduction to the series.

Campaigning

Of course, really making security part of an organizational culture means a lot more than just having content and giving some cycles to security.

It also means that:

  1. When developers say they need time to work on security, they get it
  2. There is broad tool support
  3. Questions and issues are treated as opportunities for improvement
  4. Testing is automated and encouraged
  5. Stakeholders understand how the systems might be misused
  6. People are continually learning

It typically takes ongoing effort over a period of time and relationship building as well.

We hope that the content here will be a part of helping dev teams to build a security positive culture.

References

Matt Konda

Matt is a software engineer. He's our CEO and former Chair & OWASP Board Member.

Want to stay up to date with the lastest from Jemurai?

Sign up for our monthly newsletter!