Join us for an in-depth discussion on the challenges and strategies of Application Security Program Management (ASPM) in today's fast-evolving tech landscape. Francesco Cipollone welcomes guest Akira Brand, a seasoned application security engineer and cybersecurity consultant, to explore practical insights into securing applications in the cloud and beyond. We also examine the shift in terminology from AppSec to product security and delve into Akira's unique background in opera singing, which empowers her to convey complex technical subjects with remarkable clarity. 

Sponsored by Phoenix Security: This episode is brought to you by Phoenix Security, leaders in vulnerability management from code to cloud. Take control of your security with Phoenix and see firsthand how to prioritize and act on critical vulnerabilities with a free 14-day license available at Phoenix Security - Request a Demo.

In this engaging session, curiosity takes center stage as a catalyst for teaching and learning within the tech world. I share my personal experiences and the joy found in the creative struggle of technical writing and documentation. Akira and I discuss the importance of a systematic approach, whether in threat modeling or honing educational techniques. We celebrate the power of curiosity-driven engagement and invite you to reflect on your learning processes. Wrapping up with a focus on threat modeling, we emphasize its significance in application security programs and the importance of business engagement in the risk assessment process. We debate the effectiveness of various motivational strategies, from incentives to potential legal implications for security professionals. As we close, we challenge you to incorporate threat modeling practices into your security measures and participate in our social media challenge. Stay vigilant and join us for a discussion that blends practical insights with forward-thinking perspectives in the ever-evolving landscape of cybersecurity.

What's Inside This Episode:

• 00:04 - Sponsor Message: Phoenix Security Limited
• 00:54 - Introduction by Host, Francesco Cipollone
• 01:29 - Akira Brand discusses her background and transition to application security
• 07:40 - Deep dive into application security program fundamentals and threat modeling
• 25:20 - Discussion on fostering a positive security culture within organizations

Sponsored by Phoenix Security: This episode is brought to you by Phoenix Security, leaders in vulnerability management from code to cloud. Take control of your security with Phoenix and see firsthand how to prioritize and act on critical vulnerabilities with a free 14-day license available at Phoenix Security - Request a Demo.

Don't Miss This Engaging Discussion on Cybersecurity Trends and Strategies: Tune into this enlightening episode to equip yourself with the knowledge and insights needed to navigate the ever-changing landscape of cybersecurity. Whether you're a professional in the field, a business leader, or just keen on enhancing your cybersecurity awareness, this episode is packed with valuable information to help you understand the nuances of securing applications and infrastructures in a digitally-driven world.

Resources Mentioned

• CIS Security Controls
• NIST Framework
• OWASP Guidelines

Connect with Akira Brand

• LinkedIn: https://www.linkedin.com/in/akirabrand/ 
• Personal Website: www.akirabrand.com

Cyber Security and Cloud Podcast hosted by Francesco Cipollone

• Twitter @FrankSEC42
• Linkedin: linkedin.com/in/fracipo 
• #CSCP #cybermentoringmonday cybercloudpodcast.com 

Follow us on social media to get the latest episodes:

• Website: http://www.cybercloudpodcast.com/
• Linkedin: https://www.linkedin.com/company/35703565/admin/  

• Twitter: https://twitter.com/podcast_cyber   

• Youtube https://www.youtube.com/channel/UCVgsq-vMzq4sxObVonDsIAg/ 
• You can listen to this podcast on your favourite player:
• Itunes: https://podcasts.apple.com/gb/podcast/the-cyber-security-cloud-podcast-cscp/id1516316463  

• Spotify: https://open.spotify.com/show/3fg8AqP4vEi5Im8YKxazUQ 

#Cybersecurity, #appsec #productsecurity #prodsec  #aspm