There are places where

• R&D security and product managers have constant fights over security and risk
• Security champions, who are good developers, are not really security people but no one else wants to deal with security
• Security architects serve as on-demand resources and only help when called

It doesn't have to be that way!

We can have good security and keep everyone happy

In this talk

I will share the experience that we gained at CyberArk. How our risk driven product security approach overcomes all of these challenges, improve security and innovation and harnesses everyone's contribution (developers, QAs, PMs, security champions and security architects)