Appfire’s Chief Information Security Officer Doug Kersten outlines essential strategies for maintaining security and trust as companies scale. Emphasizing a strong security culture, continuous integration of new apps, and collaborative responsibility, Appfire demonstrates how to reduce risk and safeguard sensitive data during expansion.
- Shared responsibility security culture limits risk during growth
- Standardized trust baseline accelerates secure app onboarding
- Clear partner security roles critical for marketplace expansion
What happened
Doug Kersten, Appfire’s Chief Information Security Officer, shared insights on how the company has managed to maintain and scale its security operations effectively while growing. By embedding a strong security culture early, Appfire ensured all employees understood their roles in preventing security incidents. This approach minimizes risks introduced through human errors or unreported suspicious activity.
Appfire has also implemented a centralized security program enabling rapid onboarding of new and acquired applications. They standardized critical policies such as secure coding practices, penetration testing, compliance requirements, and privacy safeguards. These efforts were supported by achieving internationally recognized certifications like ISO 27001, ISO 27017, and SOC 2, Type 1.
Why it matters
As organizations scale, security can inadvertently take a backseat if efforts do not extend beyond technology to encompass people and processes comprehensively. A security culture emphasizing shared responsibility ensures every team member contributes actively to safeguarding company assets. This reduces the risk of costly data breaches that could threaten a company’s survival.
Centralizing and standardizing security across a growing portfolio of apps is vital to maintaining consistent quality and trust. Prioritizing investments based on risk and customer demands allows companies to allocate resources efficiently without compromising security. Furthermore, establishing clear security expectations with partners is essential as marketplace ecosystems become more interconnected.
What to watch next
Companies aiming to scale securely should focus on expanding their security culture through comprehensive training and engagement, particularly targeting new hires who may initially hesitate to report security concerns. Monitoring the effectiveness of these initiatives can highlight areas for ongoing improvement.
From a technical perspective, watch for innovations in centralized security management tools that integrate vendor oversight, code testing, and vulnerability reporting. Additionally, as partnerships and acquisitions grow, firms will need to develop robust frameworks for shared security accountability that adapt to complex product portfolios.