Security Champions are a key element of any AppSec team, since they create a cross-functional team focused on Application Security.
What is a Security Champion?
- Security Champions are active members of a team that may help to make decisions about when to engage the Security Team
- Security Champions act as the “voice” of security for the given product or team
- Security Champions assist in the triage of security bugs for their team or area
(see definition here)
The main purpose of this working session is to discuss the role of Security Champions within organizations, and how Security Champions’ skills can best be utilized across organizations. The session will also discuss the need for a better definition of the role of Security Champion.
- How to define Security Champions’ roles, responsibilities, and OKR
- How to create a network of Security Champions
- Forum for Security Champions to share their experiences
- The importance of being supported by the corporate Security Policy
- How to ‘create’ Security Champions?
- How to reward Security Champions?
- Do Security Champions have a path into Application Security profession?
- Is being a Security Champion worth including in your LinkedIn profile?
- What is the Security Champion’s role in Threat Modelling?
- Agreed definition of security champions’ roles, responsibilities, and OKR
- Agreed structure to help companies create networks of security champions
- Creation of a forum for security champions
The target audience for this Working Session is:
- Security Champions
Previous Summit Working Session
Register as participant
To register as participant add
Creating a Security Champions network to either:
sessionsmetadata field from your participant's page (find your participant page and look for the edit link).
- or the
participantsmetadata field from this git session page
Back to list of all Working Sessions