Milan Williams -- AppSec Metrics

Milan Williams discusses the importance of application security metrics and how to make them both meaningful and actionable. She explains that metrics are crucial for tracking progress in what can often feel like an overwhelming security landscape, and they're valuable for career advancement and securing resources. We discuss metrics categories and several specific metrics that are good to track. Milan shares important principles on the importance of making metrics actionable through storytelling and relating security impacts to real-world consequences for users. Milan Williams is a senior product manager at Semgrep, where she helps security engineers and developers work together to ship secure software. She recently graduated from Harvard University with degrees in computer science and physics.The Application Security Podcast is brought to you by Security Journey.About Security JourneyWe provide application security training for not just your developers, but for all roles in your SDLC.→ Learn more about Security JourneyConnect with Milan Williams:→ Quiet Influence→ SemgrepMentioned in this episode:→ Quiet Influence→ SemgrepFollow the Application Security Podcast:➜ Home➜ X➜ LinkedIn➜ YouTube➜ Instagram➜ FacebookChapters:00:00 Meet Milan Williams: AppSec Metrics02:58 I like that idea. So, all right, Robert, where are we04:45 Do you think people associate metrics with boring07:13 Yeah. It's all about OKRs, objectives and key results. And I10:33 If you've got that perspective, because it's one of those things12:00 For the metrics framework, could you walk us through that a15:19 Then, is there, are there additional metrics in the framework16:48 Before we go to any of the remaining categories, metrics, so22:55 Yeah. So, I took a turn there in the middle. We25:54 If it's simple and it's easily, easy to calculate, whichever thing27:05 Because that's the one that it's easy to create metrics, but30:41 All right, Lon, we have 3 questions to ask about in32:23 Very cool. And the final question is around book recommendations. What's34:19 Very cool. So, Milan, what do you want to leave our