EP 51 — Ping Identity’s Arthur Loris on How to Tell Better Stories About Your Product Security Success

In this episode of the Future of Application Security, Harshil speaks with Arthur Loris, Senior Manager, Product Security at Ping Identity, a company that provides self-hosted identity access management (IAM) solutions. They discuss what product security constitutes at Ping Identity, the biggest challenge to great product security, and how security teams need more strategic, tactical plans to achieve their goals. They also talk about better approaches to risk remediation and why it's more effective to tell the story about how your security efforts improved the organization instead of just generating tickets.

Topics discussed:

• How Ping Identity defines product security.
• The biggest challenge to product security, which involves building good partnerships with the engineering team.
• How security teams can be better messengers of tasks that are created by the threat landscape.
• A better approach to risk remediation and how to to think about it at scale.
• Better ways of measuring your security efforts, and why telling a story about your impact — like how much money you saved — is more effective than simply generating tickets.
• How security teams can flatten the learning curve when understanding the development process.
• What the future of product security will look like, and why it should include an increased focus on strategy.