HOW TO BUILD A SECURITY GUARDIANS PROGRAM TO DISTRIBUTE SECURITY OWNERSHIP

Summary from the TLDR InfoSec newsletter

AWS has developed a Security Guardians program that empowers builders to make security decisions to enable security efforts (threat modeling, security reviews, etc) at scale. AWS has defined five steps to creating a security guardians program: set the program vision, identify innovators with a passion for security, define the behaviors that guardians will be expected to perform, maintain guardians' interest by providing opportunities to learn new skills and potential for career advancement, and measure the success of the program by gathering feedback as well as other metrics.