Search for a command to run...
Series
You might be tasked with enhancing security at your organisation. Communicating this effectively and ensuring teams build sufficiently secure software is challenging. Some may suggest a policing approach, but this is neither realistic nor sustainable...
Using a Risk Register to select and drive action is a great way to securely manage a product portfolio; but how do you identify and prioritise your must-fix items? Let me tell you how I did it. What is a Risk Register? A Risk Register, also kn...
Build a rising tide that lifts all boats
Secure systems are important. We often hold precious information in our products and that needs to be protected. There are several different approaches to ensuring good enough security in digital products. My go-to option is to place responsibility w...
Engineers are a line of defence Security threats in the online world are only increasing. Organisations need their engineers to be a line of defence against threats and vulnerabilities by releasing solid and secure code. If you are part of a security...
