Expert View: Modernising AppSec Strategies
Unity expert, Tex Davies, sheds light on the evolving landscape of Application Security (AppSec). Recent attacks this year, such as T-Mobile confirming their second data breach, have revealed a common trend – problems with third-party software are leading to data theft. Notably, the £20 million fine on British Airways by the ICO for a 2018 data breach underscores the importance of addressing vulnerabilities in third-party software.
Dealing with these issues poses a challenge for CISOs, who must balance security, compliance, cost and increasing complexity. Developers often feel slowed down by AppSec teams.
As technology evolves rapidly, with AI and open-source solutions becoming more common, traditional approaches no longer work. This has led to the merging of DevSecOps and Unity. Now, developers have tools to find vulnerabilities in their code and open-source components, but the challenge is helping CISOs focus on specific areas.
Understanding how your application works and where it operates, along with activities like threat modelling, helps organisations choose the right security measures. In today’s world, where AppSec doesn’t mean sacrificing productivity, Davies suggests we have the tools and knowledge to make security more effective.
Want to learn more about our services?
Other Articles & Blogs
Unity Workplace IT: Cyber Security
Unity Workplace IT: Cyber SecurityCyber threats are on the rise, and small businesses are increasingly in the crosshairs. Drawing on the ICO’s latest guidance, we’ve put together 7 practical steps every organisation should take to strengthen cyber resilience, plus a...
Affordable VoIP Solutions for Small Businesses
Affordable VoIP Solutions for Small BusinessesClear, reliable communication is at the heart of every successful business. Whether you’re speaking with customers, liaising with suppliers, or collaborating internally, the right system should empower your team, not hold...
Lessons in Software Implementation: What the UK Digital ID Project Can Teach Us
Lessons in Software Implementation: What the UK Digital ID Project Can Teach UsThe UK’s government’s proposed Digital ID scheme - “BritCard” - is one of the most ambitious software and systems projects in recent years. While the headlines focus on privacy and public...