Keynote by Adam Shostack: Stop Trying to Manage Risk @OWASPGLOBAL
Keynote by Adam Shostack: Stop Trying to Manage Risk @OWASPGLOBAL
Uploaded December 2025 | Updated September 2026, 2 weeks ago
They say that risk management is fundamental to cybersecurity. Whoever they are, they're wrong, and it's hurting us. We spend inordinate amounts of energy on risk analysis, but that's simply not how executives are making decisions. This talk will cover specific examples of risk requirements, why those requirements are impossible to satisfy, and what we might do to address that tension.

Adam Shostack

Managed by the OWASP® Foundation
owasp.org
Keynote by Adam Shostack: Stop Trying to Manage RiskOWASP Board of Directors - July 2026 Public Board MeetingNo Fate But What We Make: Doing Intrusion PredictionCycloneDX 2.0 Preview: Evolving BOM Architecture for Broader ApplicabilityGuardrails First: Building AI Agents That Won’t Leak Your Secrets - Track 2Red vs. Blue: Threat Modeling Agentic AI & Securing the Unbounded Third PartySecure Financial Analytics with Homomorphic Encryption and GAN Driven Data Track 2Don’t Make This Mistake: Painful Learnings of Applying AI in Security - Eitan WorcelSelf-Healing Security Test Automation for OWASP AppSec: Adaptive Defense Against Evolving ThreatsAMMF: Attention-Driven Multi-Feature Fusion for Scalable Cross-Architecture Binary VulnerabilityHow a Clean Security Audit Became a Breach Notification Six Months Later- Track 2OWASP AIVSS Project: What it is, why we need it and how we are doing it
OWASP Foundation |

Keynote by Adam Shostack: Stop Trying to "Manage Risk"

SHARE TO X SHARE TO REDDIT SHARE TO FACEBOOK WALLPAPER