Dag Flachet -- Kaizen for your Appsec Program

Dag Flachet joins us to discuss the concept of Kaizen and its application in improving application security. Dag shares his journey into the world of security, emphasizing the importance of iterative, small-step improvements. The conversation delves into how organizations can effectively implement maturity models to enhance their security programs, the limitations of compliance-focused frameworks like ISO 27,000 and SOC 2, and the practical application of Kaizen principles. They also explore the evolution and future updates of OWASP SAM, and the importance of empowering development teams through a bottom-up approach in security enhancement. Dag is the co-founder of Codific, a professor and board member at the Geneva Business School, and an active member of the OWASP Barcelona Chapter and the OWASP SAMM community.The Application Security Podcast is brought to you by Security Journey.About Security JourneyOur training includes theory and immersive learning that teaches the skills and knowledge needed to create a security-first mindset across your organization.→ Learn more about Security JourneyConnect with Dag Flachet:→ Codific→ OWASP SAMMMentioned in this episode:→ Codific→ OWASP SAMM→ OWASP SAMM→ OWASP DevSecOps Maturity Model (DSOMM)→ openCRE.org→ EU Cyber Resilience ActFollow the Application Security Podcast:➜ Home➜ X➜ LinkedIn➜ YouTube➜ Instagram➜ FacebookChapters:00:00 Meet Dag Flachet: Kaizen for your Appsec Program01:39 The thing that we love. Well, uh, we're joined by Dag06:54 That'd be funny if she sent a message yet. Like, hey13:20 Yeah, very cool. Well, as we mentioned, we're going to be17:08 Which is, is DSOM part of SAM now or are they22:08 This is an interesting thing, but maturity models have also evolved24:44 Let's wrap this whole thing together now. We introduced Kaizen. We've27:00 If we were to kind of dive a little bit deeper