A deeper look at why threat modeling serves as a foundational cornerstone for any cybersecurity team and what it means for attackers. By: James Chiappetta Disclaimer: The opinions stated here are my own, not necessarily those of my employer. Background This post will help you understand why threat modeling is foundational…

A guide for CISOs and security leaders to enable a business with Application Security and a shift left approach. By: James Chiappetta Disclaimer: The opinions stated here are my own, not necessarily those of my employer. Background If your organization produces or consumes software then it’s quite likely someone has thought…

A deep dive into the key measurements and data that will help show the impact of an organization’s Product & Application Security (AppSec) Program. By: James Chiappetta Disclaimer: The opinions stated here are my own, not necessarily those of my employer. Background One of the most obvious and important questions any…

A practical guide to interviewing successfully for your Application Security Engineering team so you can hire the right talent. Written By: James Chiappetta Disclaimer: The opinions stated here are my own, not necessarily those of my past, current, or future employer. Background If your profession is in or near the technology…

An exploration of how cognitive biases and human behaviors impact the secure development of applications. By: James Chiappetta Disclaimer: The opinions stated here are my own, not necessarily those of my employer. Background There is no escaping the obvious fact that humans play a role in both creating and solving problems…

An overview of how Application Security (AppSec) can help security compliance requirements get embedded in the Software Development Lifecycle (SDLC). By: James Chiappetta Disclaimer: The opinions stated here are my own, not necessarily those of my employer. Background There are many different activities a well ran Application Security (AppSec) Program can…

An overview of how an Application Security (AppSec) team can build an engaging security champions program to scale its culture and impact. By: James Chiappetta Disclaimer: The opinions stated here are my own, not necessarily those of my employer. Background As organizations grow, the Application Security (AppSec) team’s ability to sustain…

An overview of how Application Security (AppSec) can help balance the needs of product usability and security with Product Development. By: James Chiappetta Disclaimer: The opinions stated here are my own, not necessarily those of my employer. Background Today, it’s commonplace to have those in Product Development (Product Dev) working with…

A guide on how to successfully build, structure, hire, and retain an Application Security (AppSec) team in a modern business. By: James Chiappetta Disclaimer: The opinions stated here are my own, not necessarily those of my employer. Background The modern business is one that is building technology with applications in cloud…