BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//c4p.softwarecrafters.barcelona//Q9ZMXP
BEGIN:VTIMEZONE
TZID:CET
BEGIN:STANDARD
DTSTART:20001029T040000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10
TZNAME:CET
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000326T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=3
TZNAME:CEST
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-scbcn2026-Q9ZMXP@c4p.softwarecrafters.barcelona
DTSTART;TZID=CET:20261017T123000
DTEND;TZID=CET:20261017T132500
DESCRIPTION:In a technology organisation of over 2\,500 engineers across 20
 0+ teams\, building cloud-native\, mobile\, and embedded systems under ext
 ernal scrutiny (SOC 2\, NIS2)\, we set out to create an Application Securi
 ty function (sometimes named Product Security) that could scale without be
 coming a bottleneck\, alongside an existing InfoSec capability.\n\nThis ta
 lk shares how we designed AppSec so that teams own the security of their a
 pplications\, while a central team provides guidance\, tooling\, and enabl
 ement. It covers hiring for both technical skills and empathy\, navigating
  funding challenges\, and embedding security into delivery without slowing
  it down.\n\nWe will explore practical elements such as integrating depend
 ency scanning into developer workflows\; introducing threat modelling into
  standard development practices\; and managing incidents\, penetration tes
 ting\, and bug bounty programmes. We also built a Security Champions commu
 nity through training and hands-on initiatives.\n\nFinally\, we'll discuss
  the implications of the introduction of generative AI to the SDLC activit
 ies.\n\nA central theme is culture: building trust with engineers and lead
 ership\, working collaboratively\, and avoiding isolation. This experience
  offers insights for organisations looking to evolve Application Security 
 as a shared\, scalable responsibility in modern software development.
DTSTAMP:20260727T090405Z
LOCATION:Track 2
SUMMARY:Building an Application Security function - Toni Tassani
URL:https://c4p.softwarecrafters.barcelona/scbcn2026/talk/Q9ZMXP/
END:VEVENT
END:VCALENDAR