OWASP LA Monthly In-Person Meeting - JUN 28, 2023

TOPIC: Security Architecture - What is it? How to Deploy it
Join us for great networking, dinner and drinks, and see a presentation by Miguel (Mike) O. Villegas, President and Founder of iSecurePrivacy, LLC.

ABSTRACT: Security Architecture is a security design that addresses the technology goals, approaches, controls, and potential for the enterprise. It also specifies when and where to apply security controls. This discussion starts from the enterprise perspective using SABSA (Sherwood Applied Business Security Architecture). It then introduces COBIT, from ISACA, which is a framework that focuses on the governance and management of enterprise IT. TOGAF (The Open Group Architecture Framework) aligns security with business needs. Then there is the OWASP SAMM (Software Assurance Maturity Model) that is a framework for helping organizations analyze their current software security practices in the development of new applications. Within these four security architectures, we will also talk about some software secure coding standards such as (PCI Software Security Framework, SEI CERT Coding Standards, NIST SSDF, Microsoft Secure Coding Guidelines , and OWASP Secure Coding Practices). These standards are important, but they need to be based on meeting the business strategic objectives, business model, and business needs. That is what security architectures provide.

Thanks to our Sponsor: Prisma Cloud
The Most Complete Cloud-Native Application Protection Platform (CNAPP). Prisma Cloud secures applications from code to cloud, enabling security and DevOps teams to effectively collaborate to accelerate secure cloud-native application development and deployment.

SPONSOR Opportunities Available
*Vendors interested in sponsoring send an email to sponsorship.la@owasp.org*