Quick post to let you know the kind folks at BlueHat posted my session.
Here’s their description of the video and I think they got it right.
About This Video
Jared Pfost, a former Blue Badge, shares techniques how to determine the right amount of security investment for IT, cloud services, or even the SDL. Jared challenges you to define what success really looks like for security and decide if you really want it. Jared breaks down security investment by being honest about mandatory vs. discretionary spending, how to gauge control effectiveness, and approaches to understand team efficiency. While his techniques originated during his Microsoft years, Jared picked up significant advancements working in startups and financial services.
Note you can download the session if you don’t have silverlight installed (like me, but don’t tell the msft folks!).
