Episode 46
Building a Robust AppSec Program With the OODA Loop Framework
Observe, Orient, Decide, Act. Johnson Controls Product Security Director Brian Pitts walks us through how a framework developed for military applications can help us secure the software kind. OODA puts into letters a process that should be familiar to most security practitioners: 1. collecting data from the environment; 2. contextually assessing findings; 3. prioritizing based on risk context, scores, and/or severity; and 4. taking remedial action. Brian thoughtfully shares a bit of how ArmorCode enables his team at Johnson Controls to painlessly OODA at scale.
Resources
Further listening
Subscribe for updates
Oops! Something went wrong while submitting the form.
Oops! Something went wrong while submitting the form.
