Have you ever seen a situation when the company hires highly skilled software developers, but the resulting product fails security review completely? In my talk, I raise the problem of shared responsibility, the importance of communication, and following the processes. The audience will learn the iterative process of building a secure architecture and how it's different from secure coding.

Building a secure application is "a tradeoff game" – the security level should be enough for the product and company's business goals. Luckily, the security industry has standards, best practices and guidelines. Making a secure product is a lot about the processes: it is not enough to build a system you consider safe; you need to maintain it and periodically reevaluate risks and threats.

Join my talk to learn how the business owners and stakeholders can cooperate with the development teams to create secure products.