Oil Change or Culture Change?

Oil Change or Culture Change

Michael Howard's Web Log — Fri, 01 Jun 2007 07:10:24 GMT

Dave Ladd has just posted a very interesting and thought provoking post over on the SDL blog: http://blogs.msdn.com/sdl/archive/2007/05/31/oil-change-or-culture-change.asp

Excellent point on culture change

Rory.Blog — Fri, 01 Jun 2007 13:52:26 GMT

The Security Development Lifecycle : Oil Change or Culture Change? Really interesting point here on the Microsoft SDL blog about executive buy-in being critical to getting focus on security. I think that it actually applies to pretty much all security..

re: Oil Change or Culture Change?

asteingruebl — Sun, 03 Jun 2007 07:05:07 GMT

Dave,

Great entry. I've been thinking about this in my own job and how the vast majority of what I'm doing in building my own program in this area is affecting culture change.

On the root causes of the problem I think I'll throw in a third and its the general culture of software development vs. software engineering. I wrote a little more about it on my blog:

http://securityretentive.blogspot.com/2007/06/more-thoughts-on-training.html

re: Oil Change or Culture Change?

mattmurphy531 — Tue, 12 Jun 2007 02:21:04 GMT

Not only does security awareness stop "cold" at the exec level, it's often like hitting a brick wall. To say it stops doesn't do justice to the problem, because when it *does* stop, it can completely derail an otherwise very effective process. If your priority and the CEO's priority conflict, your priority is functionally non-existent.

MSDN FLASH IRELAND - INTERNATIONAL RESOURCES - 25 June 2007

MSDN Ireland Blog — Mon, 25 Jun 2007 17:15:22 GMT

a {color : #0033CC;} a:link {color: #0033CC;} a:visited.local {color: #0033CC;} a:visited {color : #800080;}

Microsoft SDL Process – in detail

The Security Development Lifecycle — Thu, 10 Apr 2008 00:45:34 GMT

Hello all – Dave here… I am currently at RSA and decided to take a few moments to blog about some updates

“Walking” with the SDL – Part 2

The Security Development Lifecycle — Mon, 21 Jul 2008 20:01:15 GMT

Jeremy Dallman here with Part Two in my series on “Walking” with the SDL. In Part One , I provided a