Friday, August 9, 2013

Security Innovation Values

We recently completed our values exercise and Security Innovation and I'd like to share the results. These were also shared by our CEO Ed Adams in a corporate blog post.


The following statements represent core Security Innovation values. These are the foundation on which we’ve built our success as a company, both in terms of delighted customers and happy long-term employees. We have an enviable track record of customer success, in which a vast majority of our business is repeat or word-of-mouth. We have an incredible record of employee satisfaction with turnover that is significantly lower than the average technology company or application security vendor. As the company grows we want to hold onto that success and maintain the SI feeling that we all love.In the sections below, External values are those that most directly affect our customers, how we interact with and provide value to our customers. The Internal values are those that most directly affect us as employees, how we interact with each other and maintain a high quality, professional environment and great work-life balance.


- Everyone has the right to secure software  
- Everyone has the right to use a computer without fear 
- We focus on the fix 
- Development team education is a key means to achieving better security 
- Everyone can create secure software 
- Increased awareness of security risks and mitigations will result in a healthier software ecosystem 
- 3rd party assessments of software can be used to keep development teams honest with themselves and their users 
- We can add the most value when our customers see us as a trusted advisor to improve security long term 
- We believe in measuring and holding ourselves accountable to customer satisfaction in our services and products 
- We honor our customer’s expectations regarding ethics and good conduct 
- We respect our customer’s right to privacy and do not share or publish sensitive information without consent 
- We follow the best-practices that we recommend, especially when it involves transmission or storage of sensitive customer information


- We empower our employees to learn and develop their skills 
- We create an environment of trust and open communication among all members of the organization  
- We focus on results, trusting our employees to work in the ways that are most effective for them 
- We create a flexible, rewarding work environment that supports a high quality of life for our employees 
- We believe in trustworthiness with our employees and with our customers and hold ourselves to the highest ethical standards in order to meet that goal


Thomas said...

This is awesome!

Global said...

This type of security training is so important. Some excellent lessons were presented.