Leading with the Carrot: Building Security Culture, Not Just Compliance
Reflections on my Security Champions Podcast episode featuring Mark McMillan
Security Journey Blog
Here you’ll find the latest news, information, and trends in application security and compliance, plus tips and strategies for writing safer code and building a security culture.
Stay Up-to-Date on all Security Journey news and events.
Featured Articles
New Content for Your Most Pressing & Emerging Vulnerabilities: AI/LLM & CWE Top 25
At Security Journey, we continuously evolve our training content to help organizations stay ahead of the most pressing...
5 Types of Data You Should NEVER Share with AI
Large language models (LLMs) like ChatGPT are powerful tools, but it's crucial to remember that data privacy is paramount.
Read More
Posts by Dustin Lehr
Behind the Scenes of the First Security Champions Summit
From the latest Security Champions Podcast
When Mike Burch first started the Security Champions Podcast, he had one simple goal: build a space where people could talk openly about secure coding,...
Proving the Power of Prevention
THIS ARTICLE ORIGINALLY APPEARED ON LINKEDIN.COM
Quantifying Productivity Gained Through Reduced Software Rework
Every engineering team knows the pain of rework. You spend weeks designing and...
Beyond Breaking: From Pen Tester to Problem Solver
Reflections on my recent Security Champions Podcast episode with Ariel Shin
Embracing Your Own Cybersecurity Identity: Lessons from Eva Benn
In the latest episode of the Security Champions Podcast, I had the pleasure of speaking with Eva Benn about a topic that hits at the heart of the work many of us are trying to do: reshaping the...
The Magic of Developer Empathy: A Thoughtful Conversation About Product Security
Reflections on my recent Security Champions Podcast episode with Jacob Salassi
From Soft Skills to Hard Data: Measuring Success of Security Champions and Culture Change
The Application Security Endgame
For software-centered businesses, Application Security (AppSec) is one of the most critical enablers of cybersecurity’s broader mission. It addresses risk at the...