Mike Landeck -- Security Must Meet the Needs of the Business

Security advice only helps when it connects to the needs of the people building and running the business. Mike Landeck joins Chris and Robert to discuss teaching developers, working with testers, and using breach stories without overwhelming an audience that already hears about incidents every day. He explains how practical examples can lead people toward resources such as the OWASP cheat sheets and how to choose stories that make risk understandable. The conversation then moves to business decisions, trust, and the limits of simply telling an organization what it should do. Mike argues for partnership and concrete assistance that helps teams improve over time. The episode offers ways to turn security knowledge into useful action for developers, QA staff, and business leaders.

The Application Security Podcast is brought to you by Security Journey.

About Security Journey
Security Journey provides application security education for developers and everyone in the software development lifecycle.
→ Learn more about Security Journey

Connect with Mike Landeck:
→ Mike Landeck on LinkedIn

Mentioned in this episode:
→ OWASP SQL Injection Prevention Cheat Sheet
→ Damn Vulnerable Web App (DVWA)
→ I Am The Cavalry
→ Krebs on Security
→ OWASP Cheat Sheet Series

Follow the Application Security Podcast:
➜ Home
➜ X
➜ LinkedIn
➜ YouTube
➜ Instagram
➜ Facebook

Chapters:
00:00 Connecting security to business needs with Mike Landeck
01:32 Mike’s path into application security
07:10 Teaching developers to use practical security resources
09:01 Breach fatigue and keeping the message relevant
13:28 Reaching people outside the security echo chamber
16:01 Choosing useful breach stories
19:24 Sources for understanding security incidents
20:06 Explaining security to a developer
23:10 Helping QA teams test for security
25:55 Understanding the business decision
30:15 Moving the organization toward better outcomes
34:23 Practical next steps for security practitioners