Learning to Build an Effective Security Design Review Program

This conference talk explores how to establish, manage, and scale a successful security design review program within organizations. Discover insights from 300 reviews and an impressive NPS of 52 as the speakers share their journey of building an effective program from the ground up for a 500-developer organization. Learn from their data-driven approach, experiments, failures, and successes in creating a security review process that developers willingly participate in and that effectively identifies critical security flaws before production deployment. Gain access to all materials needed to implement a similar program in your own organization, with practical guidance that goes beyond standard technical frameworks to address the programmatic aspects of security design reviews that are often overlooked in industry documentation.