Security-Driven Redesign: Navigating the Art and Politics of Securing Complex Systems

In the evolving landscape of cybersecurity, identifying vulnerabilities is only the beginning. True resilience often demands a complete security redesign – an intricate process that goes beyond patching flaws to fundamentally re-architect systems for long-term protection. This talk explores the art and science of driving security redesigns in complex and legacy environments, drawing from real-world experiences with critical Microsoft components such as Windows Boot and Windows Recovery. Attendees will gain practical strategies for overcoming technical and organizational hurdles, fostering alignment across stakeholders, and embedding security as a core design principle. Expect actionable guidelines, lessons learned, and a candid look at the challenges and triumphs of transforming security posture at scale.