Secure it like you own it
Handing engineering teams the wheel: real ownership of security
Jul 8, 20266 min read30
Command Palette
Search for a command to run...
Series
Engineer led security
Three impossible things before breakfast
How I chartered a successful security team by doing the opposite of the obvious.
Jun 30, 20266 min read88
Building Paved Paths to raise a secure tide
You might be tasked with enhancing security at your organisation. Communicating this effectively and ensuring teams build sufficiently secure software is challenging. Some may suggest a policing approach, but this is neither realistic nor sustainable...
Jun 15, 20254 min read73
Navigating Security Challenges: The Art of Risk Register Creation
Using a Risk Register to select and drive action is a great way to securely manage a product portfolio; but how do you identify and prioritise your must-fix items? Let me tell you how I did it. What is a Risk Register? A Risk Register, also kn...
Jun 12, 20254 min read107
Engineering a solution to security
Build a rising tide that lifts all boats
Jun 9, 20256 min read128
'With Great Power...' documentation as a security platform
Secure systems are important. We often hold precious information in our products and that needs to be protected. There are several different approaches to ensuring good enough security in digital products. My go-to option is to place responsibility w...
Feb 1, 20235 min read173