Session
Exploring Real-World Challenges - Insights from Product Security Leaders
About the session
Unlike traditional AppSec, product security must address embedded systems, long hardware lifecycles, and multi-layered firmware and software dependencies—where decisions made during early design can have long-term consequences.
This session explores:
• How product security fundamentally differs from application security
• Organizational models (centralized vs. matrixed) used to manage risk across hardware, firmware, and software
• Why assessing risk during the design phase is critical before code is committed or chips are selected
• The real-world trade-offs between security and delivery in industries where patching can take months or years
• How GenAI and agentic AI are being used to enhance testing, validation, and coverage
Panelists:
Cassie CrossleyVP, Supply Chain Security, Cybersecurity & Product Security Office
Schneider Electric
Schneider Electric
Uniting security professionals on a mission to democratize software security and solve its ever-evolving challenges with the power of Community.
.svg)
.svg)
The information contained in The Purple Book of Software Security and the contents of the Purple Book Community website contain ideas expressed by Purple Book Community members. These opinions are their own, do not reflect the views of the organizations they belong to, and have no affiliation with nor make any endorsement of any commercial products or services, including those of community sponsors.