Currently working as EMEA Information Security Manager at Canon, Sebastian has been in IT and Security for over 20 years, covering a multitude of roles ranging from Security Architect and Consultant, to Software Developer and Security Auditor, giving him a unique multi-faceted view on today’s Security challenges. He has led multiple security improvement programs, performed security governance assessments and designed the security architecture for a wide variety of environments – while continuously asking himself “Hmm, I wonder if we could do this in another way?”

I Still See Your AppSec Contractual Sins

Back in 2019 I shared at DefCamp the first iteration of my talk “The Decalogue of Contractual Security Sins”, dealing with the most common pitfalls of integrating (or failing to integrate) the right security clauses in our commercial IT contracts. 

Since then, things have improved in our industry, but we still have some ways to go. 

In this new talk, I focus specifically on the Application Security domain, and how to use familiar techniques – such as Threat Modelling – into designing AppSec relevant security clauses.