Mark Merkow — Secure, Resilient, and Agile Software Development

Mark Merkow works at WageWorks in Tempe, Arizona, leading application security architecture and engineering efforts in the office of the CISO. Mark has over 40 years of experience in IT in a variety of roles, including application development, systems analysis and design, security engineering, and security management. Mark has authored or co-authored 17 books on IT and has been a contributing editor to 4 others. Mark joins us to discuss how application security and agile software development methodology fit together. We hope you enjoy this conversation with Mark Merkow. At Security Journey, we believe security is every developer's job. We work with our customers to help them build long-term, sustainable security culture amongst all their developers.The Application Security Podcast is brought to you by Security Journey.About Security JourneyMark Merkow works at WageWorks in Tempe, Arizona, leading application security architecture and engineering efforts in the office of the CISO.→ Learn more about Security JourneyConnect with Mark Merkow:→ Secure, Resilient, and Agile Software Development→ Security Assurance Using the Common CriteriaMentioned in this episode:→ Secure, Resilient, and Agile Software Development→ Security Assurance Using the Common Criteria→ Common Criteria Portal→ OWASP SAMM→ BSIMM→ BSIMMFollow the Application Security Podcast:➜ Home➜ X➜ LinkedIn➜ YouTube➜ Instagram➜ FacebookChapters:00:00 Meet Mark Merkow: Mark Merkow — Secure, Resilient, and Agile Software Development02:04 I looked on Wikipedia. I looked at a picture on Wikipedia06:32 How'd you get to AppSec then12:52 High-level question then that is not directly from the book, but15:59 Yeah. And so I want to kind of— I want to17:28 Do we do that then21:09 Yeah. And so when we think about One of the major24:11 It's more about us kind of getting out of the way26:44 What's the first thing in— what's the first part that you're29:54 Yeah, I guess you can make all the plans that you33:33 Last thing that I see as I'm kind of scanning the37:47 Mark, what do you want to leave our audience with here