TISQA 2014 Conference

Security, privacy, & compliance concerns are becoming increasingly core to a wide variety of industries such as energy, finance, healthcare, government, and, in general, any Internet-facing application.  Security quality cannot be “tested in”, but rather needs to be considered at all phases of the SDLC.  However, application security is a niche skill and not all product development teams have the luxury of having an application security subject matter expert (SME) on-hand.  In this talk, we’ll demystify the “hack fu” of security and discuss steps to build a robust security assurance program .