Cassie Clark

Editor's Note: Cassie Clark is a security community manager for developers within Salesforce.  She is one of the speakers for the upcoming Security Awareness Summit 2/3 Aug in Nashville, TN. Below she gives an overview on her upcoming talk on Security Champions.

Have you heard of the employee engagement training programs called Security Champions? Ever considered starting a Security Champions program at your company? These increasingly popular initiatives can be a great way to reach your employees about security in a deeper way. Champions programs (also called Ambassador, Advocate, Sentinel or others names) identify and train volunteers in your organization to help you improve your overall security. This is an extremely effective way to scale your awareness program and embed security throughout your company.  At Salesforce we use our Champion's program to connect developers with security training and tools, empowering them to work on security efforts in conjunction with the Security team. These programs are growing exponentially in interest, but many security awareness practitioners don’t know where to start or how to grow an existing program.

I can help! I run the Security Champions program at Salesforce. We have hundreds of Champions currently participating in our program who receive customized security training from our Security team partners. I believe that what makes our program successful is our emphasis on community building. I build relationships with our developers, infusing a sense of “Ohana,” or family, into our Champions program. This motivates our Champions to continue participating and creates a sense of ownership around security. Each Champions program operates differently at different companies, and that’s what we’re going to talk about at the SANS Summit in August. My fellow presenters, Julia Knecht (Adobe), Jessica Chang and Christine Keung (Dropbox), and I will talk about how to build and scale a dynamic Champions program, including:

  • Commonalities across programs and the “bare bones”
  • Variables in each program that differ across companies
  • Our unique experiences with Champions programs

We’ll also provide time for you to brainstorm about your own Champions program and answer questions you may have about the process. When you walk away, you will:

  • Learn what a Champions program is and if it's a good fit for your company
  • Know what your program needs/would need to be successful
  • Know how to get leadership support for your program (a must!)
  • Understand how to motivate employees to join a Champions program
  • Know how to create effective metrics for your program

Come prepared to see the intersections of security, training, and community. See you in Nashville!

Bio: Cassie Clark is a security community manager for developers within Salesforce. She encourages secure coding at Salesforce by engaging developers through training, initiatives, and incentives. She focuses on building community and infusing culture throughout all campaigns. She is particularly proud of her use of outdated, nerdy pop culture references.