Let's Talk Software Security!

In today's ever-changing cybersecurity landscape, it can be difficult to keep up with the latest threats and vulnerabilities. As a result, many organizations rely on industry-standard security controls to protect their data and systems. But are these controls still relevant in the face of today's sophisticated attacks? Does achieving compliance for industry certifications make companies more resilient to breaches?

In this meetup, we'll discuss the following:

• What are industry-standard security controls?
• How effective are they against modern threats?
• What are the limitations of industry-standard security controls?
• How can organizations develop a more comprehensive and effective security strategy?

This is not a presentation, but rather a topic-focused open discussion.

We follow Chatham House Rules.
Nothing shared will be recorded or distributed anywhere online.
Come and bring your opinions and ask questions to direct the conversation where you desire, or just listen and learn. It's always a great chat with great people!

There are a lot of terms being thrown around in application security: from AST tools to ASPM, shift left, right, everywhere, and even the terms appsec vs. prodsec are nebulous. Is all this useful or just marketing fluff? Would we benefit from simpler and more descriptive language or do these terms help us in some way? And, most importantly, can we sync as a group on what these terms mean and what terms are preferred?

During this discussion, we'll cover the following:

• What are the different terms we use in software security? Let's list them out for a more structured conversation
• What is the meaning of the terms we listed? What do they mean to you? To others?
• Decide on ideal terms and language to move toward going forward (IE is "shift left" still a relevant term?)

This is not a presentation, but rather a topic-focused open discussion. Let's see if we can come to an agreement as a group and push our industry toward better terminology!

We do not record our sessions and follow Chatham House Rules in order to protect the privacy, identities, and reputations of our participants while encouraging open and honest conversation.