Paving Paths for Sustainable SecurityAnna Westelius of Netflix on High-Leverage, High-Impact Security Investments
Organizations often face challenges when they aim to build sustainable security programs at scale. Anna Westelius, director of security engineering with Netflix, discussed the company's big infrastructure projects that give it more leverage over time than investing in manual processes.
"Our threat model is different than a bank," Westelius said. "We've had a lot of time and effort to spend on high-leverage technology investments instead of doing some traditional security."
Westelius also emphasized building strong relationships with developers by "setting shared goals" and "meeting them where they are in their technologies and their understanding of those workflows."
In this video interview with Information Security Media Group at RSA Conference 2023, Westelius also discusses:
- Challenges organizations face when scaling security;
- Netflix's nontraditional security testing;
- How to create shared accountability between security leaders and developers.
Westelius is a security leader and former security researcher, analyst and hacking enthusiast. At Netflix, she leads teams that address top security risks while maintaining overall business agility, velocity and scale.