We recently co-presented a case study with Vas Rajan (CISO, INGDirect) discussing how we jointly developed a security risk management program for customer-facing mobile apps. We discussed the security risks and challenges, and a programmatic approach to assessing and defending the infrastructure and apps themselves, including:
- Merits and challenges of using Mobile Enterprise Application Platforms (MEAP)
- Creating a mobile app security testing capability
- Clear, cross-platform app development security standards and working with app developers
- Defending and monitoring the mobile service delivery network
Download Slides: Security Risk Advisors – SecureWorld – May 2012
Chris Salerno
Chris oversees operations across SRA's three business units: Advisory (red, blue, and purple team services), Managed Services (SCALR and Enterprise SOC), and SaaS. Chris focuses on SRA's service quality, building SRA's next services, and establishing career growth for SRA's employees.
Prior to his COO role, Chris specialized in cyber security assessments (pen tests, purple teams, red teams), incident coaching, security operations, strategy & roadmaps, and advanced threat defense. His expertise ranges across all industries including Fortune 500 companies.
- Speaker at BlackHat Arsenal, RSA Conference, Security BSides, and SecureWorld
- Delivered numerous security demonstrations and security awareness training showcasing the latest cybersecurity tools and techniques