Chris John Riley -- MVSP: Minimum Viable Secure Product

Chris John Riley joins Chris and Robert to discuss the Minimum Viable Secure Product. MVSP is a minimalistic security checklist for B2B software and business process outsourcing suppliers. It was designed by a team that included experts from Google, Salesforce, Okta, and Slack. The MVSP objectives are targeted at startups and other companies creating new applications, helping such organizations meet security standards expected by larger enterprises like Google. The MVSP is designed to be accessible for users, as a way to streamline the process of vendor assessment and procurement from the start to the contractual control stages. We're thrilled to have Chris John Reilly, the driving force behind Google's Minimum Viable Secure Product Initiative, MVSP for short.Connect with Chris John Riley:→ Minimum Viable Secure Product→ Cybersecurity Myths and MisconceptionsMentioned in this episode:→ Minimum Viable Secure Product→ Cybersecurity Myths and Misconceptions→ Phantoms in the Brain: Probing the Mysteries of the Human Mind→ Phantoms in the Brain: Probing the Mysteries of the Human Mind→ SLSA→ NIST SP 800-53→ PCI DSSFollow the Application Security Podcast:➜ Home➜ X➜ LinkedIn➜ YouTube➜ Instagram➜ FacebookChapters:00:00 Meet Chris John Riley: MVSP: Minimum Viable Secure Product02:24 At one of your recording locations. I was so jealous. I'm07:34 We want to dive in, Chris, on, on MVSP, uh, minimum10:49 MVSP apply if I'm in Enterprise then13:01 Can you take us through the kind of the origin story17:15 Hmm. Mm hmm. You mentioned that, uh, a number of the20:42 Let me read back then the use case for MVSP and22:00 I mean, that's one of the key benefits there is really24:48 Yeah, that makes sense. And, and, you know, you mentioned contractual27:43 Yeah. So we try and break out the controls into four35:11 Yeah, I don't see anything that's, that I'm looking at this37:48 Okay. So you might have to, you might have to do39:54 Right. And, and it's often, often a misconsideration where people look42:26 MVSP is designed to be Evolutionary, not revolutionary, right45:06 I don't know if my views are controversial. Um, I mean46:48 Excellent. And then a third question is, uh, what's your top