Marisa Fagan - Measuring Security Culture

Marisa Fagan, Head of Product at Katilyst and veteran security culture expert joins us today to share practical strategies for building and scaling security champions programs that actually work, from designing effective pilots to avoiding common pitfalls that can derail your initiatives. Learn how to motivate developers using the SAPs model (Status, Access, Power, Stuff), why getting management buy-in is crucial before launching, and discover the metrics that truly demonstrate security culture success. Marisa reveals why most programs fail, shares her blueprint for creating sustainable security culture initiatives, and discusses the evolution beyond security champions to include privacy and accessibility programs. Resources Mentioned: • Security Champion Success Guide: • OWASP Security Champions Guide: securitychampions.owasp.org • P eople-Centric Security book by Lance Hayden FOLLOW OUR SOCIAL MEDIA: ➜Twitter: @AppSecPodcast ➜LinkedIn: The Application Security Podcast ➜YouTube: Thanks for Listening! ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

You can listen to Marisa Fagan - Measuring Security Culture online on Radio and Podcast. Open the player on this page to stream the available audio.

Marisa Fagan - Measuring Security Culture is an episode from Application Security PodCast by Chris Romeo and Robert Hurlbut.

This episode is 50:05 long.

This episode was published on Aug 5, 2025.

Yes. Use the heart button on the episode page to add it to your favorite episodes list.

Yes. This page shows related episodes from Application Security PodCast when more episodes are available from the podcast feed.