Abstract
AI is rapidly changing how software is designed, written, tested, deployed, and maintained. Developers can generate more code faster, autonomous agents are beginning to participate throughout the SDLC, and long-standing assumptions about roles, review processes, and control points are being challenged.
But does any of that actually change the fundamentals of software security maturity?
Do organizations still need the same governance, education, secure design, verification, and operational capabilities, just executed differently? Does AI allow teams to skip maturity stages or accelerate through them? Are some traditional practices becoming less important while others become dramatically more important? And are our existing maturity models measuring the capabilities that will matter in an increasingly agentic software development environment?
This will be an open, interactive panel discussion not a presentation. We’ll challenge assumptions, debate where AI genuinely changes the maturity equation, and explore what software security programs should preserve, rethink, or abandon as AI reshapes the way software gets built.
Speaker Bio
Dustin Lehr is an accomplished software engineer turned executive cybersecurity leader who designs security programs that reinforce proactive behavior to avoid security incidents. He is the Co-founder and Chief Product and Technology Officer at Katilyst, a company dedicated to helping organizations enhance their culture by building engaging security champion programs. Dustin is also the driving force behind the Security Champion Program Success Guide and possesses a wealth of experience in application security, providing innovative coaching and consulting services. In addition, he is a prominent community thought leader, speaker, and founder of the “Let’s Talk Software Security” monthly open discussion meetup group.
Panelists
- Dustin Lehr (moderator)
Co-founder, Chief Product and Technology Officer, Katilyst - Brian Glas
SAMM Benchmark Lead, PG Security Advisors, Codific, and OWASP - Ken Johnson
CTO, DryRun Security