Patrik Fältström, Netnod

Patrik Fältström, Netnod

We have lately been overwhelmed by rules to follow, which not always lead to increased quality in our products. The old way of working with patch Tuesdays and service windows is not helping anymore.

What should we do, why and how? What do a modern risk analysis look like?

Open Source Security Foundation
OWASP Foundation
Open regulatory compliance working group (ORCWG.ORG)