Friday, May 18 • 1:00pm - 2:00pm
KEYNOTE: Security as a Product

Log in to save this to your schedule and see who's attending!

Feedback form is now closed.
Enterprise security teams too often are relegated to performing as firefighting, headless chickens – which is a waste of time, energy, passion, and talent. Rarely do we see the sort of strategic thinking, overarching vision, and fostering of organization-wide consensus that is required to proceed on projects in other parts of the business. At best, security teams will have a project manager to help individual projects stay on track, but this can lead to valuable streams of work on a micro-level that fail to accomplish meaningful change on a macro-level. At worst, security teams face burnout and frequent turnover due to continued disappointment over lack of progress in the security program.

Instead, I believe security should be treated as a product, which includes:
  • Defining an extended strategy to address ongoing needs
  • Understanding what the needs are across various stakeholders
  • Creating and prioritizing requirements, and maintaining a roadmap of features
  • Manage the release of features
  • Serving as the “face” of the product to the rest of the organization to cultivate consensus, answer questions, and solicit feedback
I’ll give specific examples of how this framework can help improve the performance (and even the oft-overlooked morale) of security teams and create the scaffolding necessary to build and scale security programs that engender meaningful progress.

avatar for Kelly Shortridge

Kelly Shortridge

Product Manager, Security Scorecard
Kelly Shortridge is currently a Product Manager at SecurityScorecard. In her spare time, she researches applications of behavioral economics to information security, on which she’s spoken at conferences internationally, including Black Hat, Hacktivity, Troopers, and ZeroNights.Previously... Read More →

Friday May 18, 2018 1:00pm - 2:00pm
Scruffy City Hall 32 Market Square, Knoxville, TN 37902