Conference Description
Key Takeaways
- Free virtual summit focused on building and scaling security champion programs within organisations
- Addresses the intersection of application security and AI governance in modern software development
- Designed for security engineers, AppSec leaders, product managers and developers working across technology, financial services and compliance-driven industries
- Emphasises practical implementation strategies over theoretical frameworks
- Interactive format featuring keynotes, breakout sessions, peer learning and a virtual expo
Introduction
The Security Champions Summit (SCS Summit 2026) brings together application security professionals, engineering leaders and practitioners navigating the complexities of embedding security culture within development teams. This two-day virtual event addresses a persistent challenge facing organisations: how to move beyond compliance-driven security awareness towards genuine ownership and behavioural change across technical teams. With AI tools increasingly integrated into software development lifecycles, the summit arrives at a moment when security champion models require significant adaptation.
About This Event
SCS Summit 2026 operates as a fully virtual, free-to-attend conference structured around interactive engagement rather than passive content consumption. The programme includes keynote presentations, parallel session tracks, breakout rooms for smaller group discussions, and live question-and-answer segments. A virtual expo provides opportunities to explore security tooling and platforms relevant to champion programme implementation.
The format prioritises peer learning and hands-on discussion, recognising that security champion programmes succeed or fail based on practical execution rather than policy documentation. Sessions span foundational concepts for those establishing new programmes alongside advanced content for mature organisations seeking to measure impact and sustain momentum.
Building Effective Security Champion Programmes
Security champion programmes represent a distributed approach to application security, embedding security-minded individuals within development teams rather than relying solely on centralised security functions. The summit examines the full lifecycle of these initiatives, from initial programme design through scaling across large engineering organisations.
A significant focus falls on engagement and sustainability. Many organisations launch champion programmes with enthusiasm only to see participation decline as competing priorities emerge. Sessions address strategies for maintaining momentum, fostering genuine peer influence, and demonstrating measurable programme impact to leadership. This measurement challenge proves particularly acute for security initiatives, where success often manifests as the absence of incidents rather than visible achievements.
AI Integration and Governance in Secure Development
The integration of artificial intelligence into software development workflows introduces both opportunities and complications for security champion programmes. AI-assisted coding tools, automated security scanning, and machine learning components within applications each present distinct governance requirements that traditional champion models may not adequately address.
The summit dedicates substantial attention to operationalising AI governance within existing security frameworks. This includes adapting champion responsibilities to encompass AI-specific risks, establishing cross-functional collaboration between engineering, product, data science, legal and compliance teams, and developing practical approaches to responsible AI policy implementation. Rather than treating AI governance as a separate discipline, the programme positions it as an evolution of secure development practices that security champions must incorporate into their existing remit.
Cross-Functional Collaboration Challenges
Effective security champion programmes require collaboration across organisational boundaries that often prove difficult to navigate. Engineering teams, product management, data teams, legal departments and executive leadership each bring different priorities, risk tolerances and communication styles to security discussions. The summit addresses practical approaches to building these cross-functional relationships, recognising that technical security knowledge alone rarely drives organisational change without corresponding influence and communication skills.
Who Should Attend
The summit serves security champions currently operating within development teams, including engineers, product managers and developers who have assumed security responsibilities alongside their primary roles. Programme leaders responsible for designing, implementing and measuring champion initiatives will find relevant strategic content, as will application security consultants advising client organisations on programme development.
Professionals working in technology, software-as-a-service, financial services and other compliance-driven sectors represent the primary audience, though the principles discussed apply broadly across industries where secure software development matters. The content targets mid-level to senior practitioners, team leads and executives with direct involvement in security and engineering functions.
Conclusion
SCS Summit 2026 addresses a maturing discipline at a transitional moment. As organisations recognise that centralised security teams cannot scale to meet the demands of modern software development, champion programmes offer a path toward distributed security ownership. The summit provides a forum for practitioners to share implementation experiences, examine what distinguishes successful programmes from those that stall, and prepare for the governance challenges that AI adoption introduces to secure development practices.