Dave Ferguson, Principal Solution Architect, Veracode Traditionally, software development training falls short on security. And as enterprises embrace the “shift left” movement, that gap puts them at risk. Veracode’s Dave Ferguson discusses the gap and how Veracode’s new Security Labs was developed to fill it.
In an interview with ISMG, Ferguson discusses:
Findings from the latest State of Software Security report;
Why developer training falls short on security;
The new Security Labs initiative and how it aims to change the game for developer training.
Ferguson is a principal solution architect at Veracode. He has 15 years of experience in application/software security and 12 years prior to that as an application developer. Before Veracode, he served as principal consultant at FishNet Security (now Optiv), led the global application security program at Sabre Corp. and directed the web application scanning product line at Qualys. Dave is the author of the original OWASP
Current figures from the GDPR Enforcement Tracker show that numerous penalties continue to be incurred by organisations, with many proving that compliance and data security still represent a major challenge for companies.
So what can organisations - both large and small - do now if they still have difficulties with GDPR compliance? One of the most important and essential steps to minimise data protection breaches is to identify security gaps and vulnerabilities. Companies today are juggling a number of applications that often store sensitive data. This is where compliance violations can occur.
Hear Julian Totzek-Hallhuber, Principal Solution Architect at Veracode provide tips on how to navigate compliance requirements and regulations through application security and secure development. Some of his discussion points will include: