“Shift Left” Isn’t What You Expected

Let’s address the elephant in the room — “Shift left” hasn’t had the impact on our software security as many of us expected it to have. While it has influenced security in an indispensable way, I argue that “shift left” should be viewed as a tactic in a larger management strategy rather than a solution to solve appsec woes. I will review the success and limitations of “shift left” and how we can “restart” the process by applying it a …

address elephant impact isn management room security shift left software software security strategy tactic