EP 32 — Leading with Context - Where Institutional Knowledge Cannot Scale

Future of Application Security

Content provided by Tromzo. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Tromzo or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://player.fm/legal.

1y ago 30:04

MP3•Episode home

In the ever-evolving landscape of application security, organizations face the challenge of effectively scaling and growing their AppSec programs. On this episode of the Future of Application Security podcast, Harshil Parikh interviews Ty Sbano, the CISO of Vercel, who brings years of experience and expertise in the field of cybersecurity. During their conversation, Ty and Harshil shared their valuable experiences and learnings from scaling AppSec programs in small and large organizations. They also address topics such as gaining visibility into software artifacts, asset ownership and responsibility, and identifying critical tools for the business.

Topics discussed:

The importance of having a comprehensive understanding of software artifacts to ensure their security
How collaboration between development teams, security teams, and asset owners can help foster a proactive approach to addressing vulnerabilities and mitigating risks.
The shift from first-party code to third-party code
Who owns the code and how are they taking accountability for what is shipped
How organizations can conduct regular assessments and evaluations to identify which tools are truly important to the business and prioritize their investments accordingly

To learn more about scaling and growing AppSec programs, we highly recommend listening to the full episode.

60 episodes

#Business #Tromzo