EP 44 — Workrise’s Tim Kelly on How to Build a Data-Driven Application Security Program

In this episode of the Future of Application Security, Harshil speaks with Tim Kelly, Director, Security Engineering at Workrise, a technology company with a platform that supports the energy workforce. They discuss the importance of collecting, storing, and analyzing data in order to enhance application security efforts, and how to go about building a data program that does that. They also discuss the ways in which you can use data to inform your security efforts, how to use data to help you inventory and prioritize vulnerability management, how to get to a 100% success rate with data-backed solutions, and what the future of data-driven application security will look like. Topics discussed: How Tim's background in experimental psychology and data analytics informs his work as the Director of Security Engineering. The definition of data engineering and how the practice can apply to application security. Why data is important for security and how a big part of collecting and analyzing data for its insights is because "you can't secure what you can't see." How to play into your strengths when building a data program by looking at your current capabilities, including leveraging a business insights team. How you can use data to determine the efficiency of your vulnerability management program, how to monitor performance, and how to find out where your efforts are producing the most value. The benefits of using data to inform your security approach, and how to get to 100% success rates with fixes by doing so. What the future of application security will look like and how teams can integrate more data analysis practices.