Discover and read the best of Twitter Threads about #swsec
Most recents (1)
1/8 Now that the poll has closed, I'd like to disclose that I'm with the minority (No) on this one. Rationale summarized in this thread 👇
#pci #training #appsec #swsec
cc: @shehackspurple @bilcorry @robertauger @cigitalgem
#pci #training #appsec #swsec
cc: @shehackspurple @bilcorry @robertauger @cigitalgem
2/8 Note: My position is mostly for large enterprises - especially the ones that operate in different sectors/countries (jurisdictions) & thus are subject to multiple compliance mandates & regulations. But, one can philosophically embrace this approach for other enterprises too.
3/8 First up, if you are subject to various compliance regulations and standards, it is best to make sure that your internal security standards account for them all so that you can present a unified set of security requirements to product/engineering. No need to mention "PCI".
