"Creating a graph based security organisation " - Dinis Cruz (+ Maeve Scarry)
Channel: OWASP London
Date: 04/08/2019

The way to create a modern and empowering security organisation, that both protects and empowers/enables the business, is to view the entire company and security ecosystem as a graph (where nodes are the multiple players and edges are the hyperlinked connections between them). The key strategy is to view everything as projects, with all resources connected digitally and a model that rewards the maximum visibility of risks and tasks.

Speaker Bio:
Dinis Cruz is the CISO of Photobox and a renowned application security expert who is passionate about creating Application Security teams and providing Application Security assurance across the Software Development Lifecycle (from development, to operations, to business processes, to board-level decisions). His focus is in the alignment of the business’s risk appetite with the reality created by internally developed applications..

Slides: https://www.slideshare.net/DinisCruz/creating-a-graph-based-security-organisation-apr-2019-owasp-london-chapter-meeting

This talk was presented at the OWASP London Chapter Meeting on the 4th April 2019 at Facebook London HQ