The definition of a Security Champion according to OWASP is “an active member of a team that may help to make decisions about when to engage the security team.” In a time of growing high profile attacks on software supply chains across the world - most recently Dependency Confusion and the SolarWinds breach - building a security culture in your development teams has never been so important. Robbie Tyrie, Information Security Manager at Aegon, has implemented security champions in a number of enterprise organisations including Tesco Bank, JP Morgan, Virgin Money and NHS Scotland. Join Robbie as he shares his step-by-step Playbook. Learn how to:
Create a problem statement
Identify the champions
Define the role
Create communication channels between dev, sec and ops