Anton Chuvakin argues that engineers should own security in real time rather than waiting for a central team. Security teams shift from gatekeepers to providers of tools, dashboards, and guidance that let developers act fast.
Chapters
We need this culture of distributed security ownership, where engineers are empowered to manage all of these things that they may be seeing through these systems in real time. We need them to act fast. We need to trust them, but we need to give them the tools, the guidance, and this continuous support, because it's not just one metric or one— Mm-hmm. policy sentence that will solve it all. It is about being with them, helping them, and constantly adjusting our tools and capabilities and analytics, everything that's involved. And our tools are also evolving. So that's also the role of the security team, to constantly improve the security tooling and the dashboards and analytics that they're providing for everyone to better address this stuff.