Mike Landeck -- Security Must Meet the Needs of the Business

Security advice only helps when it connects to the needs of the people building and running the business. Mike Landeck joins Chris and Robert to discuss teaching developers, working with testers, and using breach stories without overwhelming an audience that already hears about incidents every day. He explains how practical examples can lead people toward resources such as the OWASP cheat sheets and how to choose stories that make risk understandable. The conversation then moves to business decisions, trust, and the limits of simply telling an organization what it should do. Mike argues for partnership and concrete assistance that helps teams improve over time. The episode offers ways to turn security knowledge into useful action for developers, QA staff, and business leaders.The Application Security Podcast is brought to you by Security Journey.About Security JourneySecurity Journey provides application security education for developers and everyone in the software development lifecycle.→ Learn more about Security JourneyConnect with Mike Landeck:→ Mike Landeck on LinkedInMentioned in this episode:→ OWASP SQL Injection Prevention Cheat Sheet→ Damn Vulnerable Web App (DVWA)→ I Am The Cavalry→ Krebs on Security→ OWASP Cheat Sheet SeriesFollow the Application Security Podcast:➜ Home➜ X➜ LinkedIn➜ YouTube➜ Instagram➜ FacebookChapters:00:00 Connecting security to business needs with Mike Landeck01:32 Mike’s path into application security07:10 Teaching developers to use practical security resources09:01 Breach fatigue and keeping the message relevant13:28 Reaching people outside the security echo chamber16:01 Choosing useful breach stories19:24 Sources for understanding security incidents20:06 Explaining security to a developer23:10 Helping QA teams test for security25:55 Understanding the business decision30:15 Moving the organization toward better outcomes34:23 Practical next steps for security practitioners