“The security champion is going to help you during these activities because the security champion will bring forth, will be leading the charge there, and will have a knowledge of what the security backlog is and will have knowledge of what the current threat model looks like and introduce that to the team and will help the team to t-shirt size any issues that come along that have a whiff of security to them.”

Transcript evidence from Geoff Hill — AppSec, DevSecOps, and Diplomacy.