How to Approach InfoSec Like a Federal Auditor - 5 Key Security Principles

Discover how to approach information security from the perspective of a federal auditor in this 37-minute conference talk from AppSecUSA 2017. Explore the comprehensive security standards published by independent federal government agencies, including the Federal Information Processing Standard (FIPS) 140-2 and the National Information Assurance Directive (NIAP). Learn about five crucial security principles derived from these standards: defining security boundaries, creating functional specifications, protecting critical security parameters, securing network traffic, and proving cryptographic stack strength. Gain insights into implementing these practices in industry settings and understand how to improve security throughout development, reducing risk for both customers and companies.