Cybersecurity Beyond Automation


Automated security testing has elegantly addressed many cybersecurity concerns in modern software development. Besides incorporating security gates in CI/CD pipelines, however, there are additional measures to ensure that our innovation can withstand the growing threat landscape. In this talk, we will share our experiences in applying critical security best practices that help protect your customers’ data and ensure business continuity. We put these security practices in the context of relevant industry standards to show a holistic view of a mature security development lifecycle.



Derek Yu


Principal Security Consultant @ Zühlke Engineering AG

Derek comes from Taiwan and currently works at Zühlke Engineering in Zurich as a Principal Consultant in Cybersecurity. He did his doctoral


David Sommer


Lead Security Consultant @ Zühlke Engineering AG

“Security is a design principle!” This is my conclusion after being involved in secure software development since my teens, while financing