Is CISO responsible for secure cording or it should be handled by quality fuction.
You need to be a member of CISO Platform to add comments!
Join The Community Discussion
CISO Platform
A global community of 5K+ Senior IT Security executives and 40K+ subscribers with the vision of meaningful collaboration, knowledge, and intelligence sharing to fight the growing cyber security threats.
Join CISO Community Share Your Knowledge (Post A Blog)
Atlanta Chapter Meet: Build the Pen Test Maturity Model (Virtual Session)
- Description:
The Atlanta Pen Test Chapter has officially begun and is now actively underway.
Atlanta CISOs and security teams have kicked off Pen Test Chapter #1 (Virtual), an ongoing working series focused on drafting Pen Test Maturity Model v0.1, designed for an intel-led, exploit-validated, and AI-assisted security reality. The chapter was announced at …
- Created by: Biswajit Banerjee
- Tags: ciso, pen testing, red team, security leadership
Comments
I completely agree with Dinesh.From the macro level perspective secure coding is the responsibility of the CISO but from the micro level perspective,it can be handled by the quality team.
if you mean secure coding here, then i feel this is something which should be governed by CISO. They should design the framework, polices, processes around it and should also get VA/PT and secure code review exercises conducted to gauge the health of coding practices with respect to security. Its perfectly fine to train and involve quality team but the ultimate responsibility must lie with CISO.