OWASP LA Monthly In-Person Meeting - NOV 30, 2022

TOPIC: Leveling Up Security Testing Programs
*** NOTE New date NOV 30th ***
Join us for great networking, dinner, and see a presentation by Aaron Guzman, Head of Security Engineering at Cisco Meraki

ABSTRACT: Launching security testing programs is a milestone for organizations small and large. Businesses that maintain risk programs require security testing on an ongoing basis to ensure controls are in place to identify vulnerabilities proactively as part of development and deployment efforts. Similarly, companies looking to partner with larger organizations often require regular penetration testing and reports to review as a prerequisite to their risk assessment when onboarding third-party vendors. Without chartering a security testing path, businesses become constrained repeating inefficient patterns due to lack of clarity and preparedness to elevate program maturity to the next level. In this session, we will discuss why security testing is an important function in Information Security programs, provide an overview of the types of testing, how they're measured, introduce common frameworks, and leveling up programs by adapting maturity models to help define your vision with measurable data points.

BIO: Aaron Guzman is co-author of the “IoT Penetration Testing Cookbook” and Head of Security Engineering with Cisco Meraki. He leads open-source initiatives that provide awareness around IoT security defensive strategies as well as lowering the barrier of entry into IoT hacking under OWASP’s IoT and Embedded Application Security projects. Aaron is co-chair for Cloud Security Alliance’s IoT Working Group and a technical reviewer for several IoT Security books. He has extensive public speaking experience delivering conference presentations, trainings and workshops globally. Follow Aaron’s research on Twitter @scriptingxss.
You can find the list of conferences and events Aaron participated in online at https://www.linkedin.com/in/scriptingxss/

Thanks to our Sponsor: Cider
Cider's AppSec OS allows Security teams to reduce the friction between Engineering and DevOps by contextualizing the software delivery pipeline and securing everything from code all the way to production.

*Vendors interested in sponsoring send an email to sponsorship.la@owasp.org*