"Making Fact-Based Security & Risk Decisions (using OWASP Security bot & Data Science)" - Dinis Cruz
The way to create a modern and empowering security organisation, that both protects and empowers/enables the business, is to view the entire company and security ecosystem as a graph (where nodes are the multiple players and edges are the hyperlinked connections between them). This presentation will show real-world examples on how to use tools such as Jira, Slack, Jupyter notebooks, Lambda functions , Wardley Maps and OSBost to map and automate vulnerability and incident management workflows and ultimately empower the decision-makers by providing fact-based risk matrices and dashboards.
Slides: https://www.slideshare.net/DinisCruz/...
Speker Bio: Dinis Cruz (@DinisCruz)
Dinis Cruz is a CISO at Revolut and a renowned application security expert who is passionate about creating Application Security teams and providing Application Security assurance across the Software Development Lifecycle (from development, to operations, to business processes, to board-level decisions
This talk was presented at the OWASP London Chapter meeting on the 24th October 2019 at Aon offices