Chris John Riley -- MVSP: Minimum Viable Secure Product

Chris John Riley joins Chris and Robert to discuss the Minimum Viable Secure Product. MVSP is a minimalistic security checklist for B2B software and business process outsourcing suppliers. It was designed by a team that included experts from Google, Salesforce, Okta, and Slack. The MVSP objectives are targeted at startups and other companies creating new applications, helping such organizations meet security standards expected by larger enterprises like Google. The MVSP is designed to be accessible for users, as a way to streamline the process of vendor assessment and procurement from the start to the contractual control stages. We're thrilled to have Chris John Reilly, the driving force behind Google's Minimum Viable Secure Product Initiative, MVSP for short.

Connect with Chris John Riley:
→ Minimum Viable Secure Product
→ Cybersecurity Myths and Misconceptions

Mentioned in this episode:
→ Minimum Viable Secure Product
→ Cybersecurity Myths and Misconceptions
→ Phantoms in the Brain: Probing the Mysteries of the Human Mind
→ Phantoms in the Brain: Probing the Mysteries of the Human Mind
→ SLSA
→ NIST SP 800-53
→ PCI DSS

Follow the Application Security Podcast:
➜ Home
➜ X
➜ LinkedIn
➜ YouTube
➜ Instagram
➜ Facebook

Chapters:
00:00 Meet Chris John Riley: MVSP: Minimum Viable Secure Product
02:24 At one of your recording locations. I was so jealous. I'm
07:34 We want to dive in, Chris, on, on MVSP, uh, minimum
10:49 MVSP apply if I'm in Enterprise then
13:01 Can you take us through the kind of the origin story
17:15 Hmm. Mm hmm. You mentioned that, uh, a number of the
20:42 Let me read back then the use case for MVSP and
22:00 I mean, that's one of the key benefits there is really
24:48 Yeah, that makes sense. And, and, you know, you mentioned contractual
27:43 Yeah. So we try and break out the controls into four
35:11 Yeah, I don't see anything that's, that I'm looking at this
37:48 Okay. So you might have to, you might have to do
39:54 Right. And, and it's often, often a misconsideration where people look
42:26 MVSP is designed to be Evolutionary, not revolutionary, right
45:06 I don't know if my views are controversial. Um, I mean
46:48 Excellent. And then a third question is, uh, what's your top