A case study on security training programs: Many organizations find themselves needing to create a security training program, but do not know where to begin. Educating architects, developers, and project managers on how to properly deal with security issues creates a solid foundation for secure development and is critical in today's high-risk online environment. Four years ago, State Street Bank created a pioneering security education program for its internal employees and contractors. State Street and its partner, Safelight Security Advisors, will present a case study on how to properly implement an internal security training program. We will discuss the unique challenges State Street faced, how we addressed them, and the process we went through to create a successful training program that is now mandatory for all staff involved in systems development worldwide. The topics covered include gaining management buy-in, building the curriculum, and implementing the program. We will share successes and lessons learned, discuss the future of our security education programs, and map out general guidelines that can be applied to any organization's security program. Less