Suggestions
Grant Ongers
Cybersecurity Expert | CSO | Advisor
Grant Ongers is a seasoned professional with over 30 years of experience in information security, holding various roles in development, operations, and governance.
As the CSO and Co-Founder of Secure Delivery, Grant focuses on helping regulated organizations optimize delivery and security through his expertise in ITIL, ISO/IEC 27002, and ScrumMaster.
He is committed to advancing modern application security practices and tooling by offering consulting, strategic advisory services, and training, aiming to align security with efficient delivery processes.
Grant actively contributes to the cybersecurity community by advising cyber security startups and serving on the Advisory Committee at The Retired Investigators Guild.
His educational background includes a Master of Science in Information Security from Rhodes University and a BTec in Information Technology from Cape Technicon.
Throughout his career, Grant has held key positions in various organizations, such as The Cyber Helpline, Myrror Security, OWASP Foundation, Metropolitan Police, Equal Experts, Shell Recharge, Nonprofit Cyber, NewMotion, HM Revenue & Customs, O2 (Telefónica UK), HSBC, Reed Business Information, BSides Cape Town, VOSS, and Space Age Technologies.
Highlights
So... do I have any Meta security folks in my network? Specifically someone on the WhatsApp side? If so would you reach out to me via a DM please?
"How do I determine the security requirements of new markets?"
An expression I’ve grown to love hearing on London’s Underground and National Rail platforms is: "Mind The Gap", reminding you to be careful when moving between trains and platforms. An important reminder at some stations as the gap can be quite substantial but even where it isn’t, the concerns of health and safety in the UK are always on point. Minding the gap between the security capabilities you need to have as an organisation and your current capabilities is the foundation of all security improvement.
The gap will change in size, shrinking and growing, as you mature as an organisation, when you enter new geographic markets or develop new lines of business. We work with our clients to align software delivery to a standard security capability framework, such as the OWASP PSCF. This framework is already mapped to common regulatory requirements and industry standards and we then extend that mapping to the new requirements arising through our clients’ business change. With the gap identified we then deliver to a prioritised roadmap of the capability improvements needed.
Having a clearly defined and measurable but flexible approach to security prevents compliance from being your barrier to growth.
If you’ve faced the challenge of changing security and compliance requirements, what advice would you give to someone in this position? — At Secure Delivery we build security capabilities for our clients by focusing on three aspects:
1.) Inspiring your teams to create more secure products by demystifying security and helping them understand how to deliver higher-quality that they can be proud of and customers appreciate. 2.) Informing people making decisions at all levels of the organisation so that the right ones are made at the right time to embrace changing business needs and ensure high performance throughout. 3.) Improving the security of ways of working and of the products being delivered through hands-on help to put the energy into your organisation that’s required to raise capabilities to new levels.
If you’d like to find out more about how we can help to improve security capabilities in your organisation’s software delivery, book an hour with us for a no-obligation consultation on your security needs here: https://lnkd.in/eGiAZSYr
