Security By Design Decision

Sarah Fluchs opens with a key question - what are you going to spend your security budget on? And she makes the case that security design decisions, building systems that are defensible, deserve more attention and resources.
Sarah then describes four security engineering simplifiers. Items that can help engineers build systems that are defensible without the need to become security experts.
Lots of gems in this, such as "management should decide what high consequence events should focus on".

[@mitchimpey1726]

I have seen Sarah and her team in action and I can confirm that these processes work wonders. highly recommended.

[@brianduffy8768]

Brilliant

[@paulveeneman2085]

OT Sequel to "I am here to tell you that OT engineering does not deserve to be called engineering." Sarah, S4 2019