Gaetan Labat shares cost-effective strategies for embedding security into projects, covering early visibility techniques, risk prioritization, streamlined documentation and practical acceptance procedures.
Integrating security during project development is significantly more cost-effective than remediating issues post deployment. This session explores common challenges faced by cybersecurity professionals and provides practical solutions to overcome them.
The discussion covers how to gain early project visibility by "following the money" through budget approval processes, avoiding the "too early/too late" intervention trap, and embedding security requirements directly within IT project workflows rather than treating them as separate components.
In this session, you will learn:
- How to prioritize security risks without "seeing dangers everywhere";
- Why security testing should be integrated into the regular testing process;
- How to create effective security documentation without overwhelming paperwork;
- Strategies for implementing security acceptance procedures when compliance isn't feasible.
Here is the course outline:
Integrating Security Into IT Projects |