[Security-Discuss] Ideas for RTC Cyber Security Forum Q2 meeting?

[Tom Casey]

I attached the ebook here.  It’s not an owasp type thing but more on the how to change the culture to embrace appsec into the org and dev teams.

 

 

 

Tom Casey, Account Executive
O 804-767-2412M 703-989-0833
e tom.casey at guidepointsecurity.com

 

Confidentiality Notice: This communication constitutes an electronic communication within the meaning of the Electronic Communications Privacy Act, 18 U.S.C. Section 2510, and its disclosure is strictly limited to the recipient intended by the sender of this message. This transmission, and any attachments, may contain confidential information and work product(s). If you are not the intended recipient, any disclosure, copying, distribution or use of any of the information contained in or attached to this transmission is STRICTLY PROHIBITED. Please contact us immediately by return e-mail or call (877) 889-0132 option 5, and destroy the original transmission and its attachments without reading or saving in any manner.
 

 

From: "Weeks, Thomas" <t.weeks at vt.edu>
Date: Thursday, April 22, 2021 at 4:16 PM
To: Tom Casey <tom.casey at guidepointsecurity.com>, "security-discuss at lists.rbtc.tech" <security-discuss at lists.rbtc.tech>
Subject: Re: [Security-Discuss] Ideas for RTC Cyber Security Forum Q2 meeting?

 

This being a kind of OWASP best practices presentation?

Interesting.. Have a link to it?

 

Do any of you CISSOs or Cyber/Network Security folks have this area of security responsibility as a part of your oversight? Are you responsible for bringing in secure code review/test auditors?

 

Group thoughts?

 

--

T.Weeks

 

From: Tom Casey <tom.casey at guidepointsecurity.com>
Sent: Thursday, April 22, 2021 2:04 PM
To: Weeks, Thomas <t.weeks at vt.edu>; security-discuss at lists.rbtc.tech <security-discuss at lists.rbtc.tech>
Subject: Re: [Security-Discuss] Ideas for RTC Cyber Security Forum Q2 meeting? 

 

T.Weeks,

 

Recently my appsec team published an ebook titled “Secure Coding Culture Playbook”.  

 

I don’t know how many member companies have an appsec program but I could get one of the leaders of that team and author of that ebook to come on and talk about what it takes to create that culture?

 

 

 

 

Tom Casey, Account Executive
O 804-767-2412M 703-989-0833
e tom.casey at guidepointsecurity.com

 

Confidentiality Notice: This communication constitutes an electronic communication within the meaning of the Electronic Communications Privacy Act, 18 U.S.C. Section 2510, and its disclosure is strictly limited to the recipient intended by the sender of this message. This transmission, and any attachments, may contain confidential information and work product(s). If you are not the intended recipient, any disclosure, copying, distribution or use of any of the information contained in or attached to this transmission is STRICTLY PROHIBITED. Please contact us immediately by return e-mail or call (877) 889-0132 option 5, and destroy the original transmission and its attachments without reading or saving in any manner.
 

 

From: Security-Discuss <security-discuss-bounces at lists.rbtc.tech> on behalf of "Weeks, Thomas" <t.weeks at vt.edu>
Date: Thursday, April 22, 2021 at 12:02 AM
To: "security-discuss at lists.rbtc.tech" <security-discuss at lists.rbtc.tech>
Subject: [Security-Discuss] Ideas for RTC Cyber Security Forum Q2 meeting?

 

Just nailing down a date (in June) for the RTC Cyber Security Forum Q2 meeting.. and wanted to open up this list thread to discuss a possible topic or speaker. Any bright ideas or timely requests?

 

I think we're saving a hands on Capture the Flag for later this year. Maybe in conjunction with B-Sides.

 

Talk wise.. the last couple have been panel talks, so we should probably either pivot to either a single presenter/topic.. or does anyone want to head up a hands on workshop?

 

T.Weeks

RBTC Cyber Security Forum </hat>

_______________________________________________ Security-Discuss mailing list Security-Discuss at lists.rbtc.tech https://urldefense.proofpoint.com/v2/url?u=http-3A__lists.rbtc.tech_mailman_listinfo_security-2Ddiscuss&d=DwIGaQ&c=cehHn3YFTvbeqmBOizlVwndgdnPducYBouAyYX7fXYg&r=Kf5RBswNMWU0qgnhv-jum_IwioCzbHpyt-zOC4z_r4w&m=IEzxaZT0D3jEz3ulNwxaCrTY1tmbkdpjJJVf5iZ6c6I&s=dlNyxzfzYFBgxnU7kmDhbUlgRqNcPFeMZB8RK4_hL8E&e= 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rbtc.tech/pipermail/security-discuss/attachments/20210422/4c8550d7/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: GuidePoint Secure Coding Culture Playbook.pdf
Type: application/pdf
Size: 385399 bytes
Desc: not available
URL: <http://lists.rbtc.tech/pipermail/security-discuss/attachments/20210422/4c8550d7/attachment-0001.pdf>