Brenna Leath -- Product Security Leads: A different way of approaching Security Champions

Brenna Leath is currently the Head of Product Security for a data analytics company where she sets the application security strategy for R&D and leads a team of security architects. Brenna originally joined us to talk about EO 14028 and the implications for private sector programs, BUT, we were chatting about security champions and product security leads, and we changed our focus to cover these topics instead. We hope you enjoy this conversation with... Brenna originally joined us to talk about Executive Order 14028 and the implications for private sector programs. But as we were chatting about security champions and product security leads in the preamble to the interview, we decided to change our focus and cover these topics instead.The Application Security Podcast is brought to you by Security Journey.About Security JourneyBrenna Leath is currently the head of product security for a data analytics company where she sets the application security strategy for research and development and leads a team of security architects.→ Learn more about Security JourneyConnect with Brenna Leath:→ Executive Order 14028→ BSIMMMentioned in this episode:→ Executive Order 14028→ BSIMM→ OWASP Cornucopia→ Burp Suite→ Log4j→ OWASP CornucopiaFollow the Application Security Podcast:➜ Home➜ X➜ LinkedIn➜ YouTube➜ Instagram➜ FacebookChapters:00:00 Meet Brenna Leath: Product Security Leads: A different way of approaching Security Champions04:02 Film studies and English is a fascinating combination for me. And16:14 Yeah. So you may— you use the word federated in regards19:35 Yeah, there has to be some, some action that they can25:49 We don't believe in scaring people with it. So, so I've