AppSec & DevSecOps Singapore schedule

Topic to Be Confirmed

• What innovative practices ensure end-to-end security across the software development and supply chain lifecycle, integrating DevSecOps, AppSec, and container security?
• How can continuous risk assessment and improvement through DevSecOps practices protect every phase of the SDLC?
• What role does automation play in enhancing operational efficiency and simplifying compliance within governance frameworks?
• How can layered security strategies proactively address vulnerabilities in software supply chains and containerised environments?

Moderator:

Dan Haagman CEO Chaleit & Honorary Professor Murdoch University

Speakers:

Reuben Athaide Head Innovation, Application Security and Assurance Standard Chartered

Yih Wen Tsai CISO Ministry of Manpower 

• Breaking Down Silos: Fostering collaboration between development, IT operations, and security teams for unified goals
• Embedding security checks and tools into the CI/CD pipeline without slowing down development
• Shared Responsibility: Aligning roles, responsibilities, and KPIs to ensure security is everyone's job
• Encouraging a proactive mindset toward security through training and organisational buy-in

Moderator:

Dan Haagman CEO Chaleit & Honorary Professor Murdoch University

Panellists:

Sathiyaseelan Murugaiayh Head of DevSecOps Circles.Life

Gowtham Sundar Senior Lead Engineer - 3A Security SPH Media

While driving adoption of CI/CD across more than 50 Singapore Government agencies in a landscape with distributed and mostly outsourced systems, GDT-CSH has encountered various security anti-patterns in the CI/CD pipelines that could compromise application security. Drawing from real-world experiences with agencies and vendors, this talk will dissect common security anti-patterns we've discovered and share practical strategies for addressing them.

Speakers:

Linda Chang Assistant Director, Clusters & Technology Management Office (CTMO) GovTech

Daniel Liu Senior DevOps Engineer GovTech

As software development accelerates with AI-generated code and scalable cloud-native architectures like microservices and serverless, the need for early, efficient, and scalable vulnerability remediation is critical. But the true challenge lies not just in finding vulnerabilities-it's fixing them without slowing down developers. This session explores how Agentic AI, embedded in a developer-centric AppSec platform, is transforming secure software delivery by operating directly within the IDE and workflows. 

Agentic AI empowers organisations to scale secure coding through three key steps:

• Identification - Detect vulnerabilities early in development
• Fix Suggestion - Provide actionable, context-aware remediation to earn developer trust
• Remediation - Allow manual resolution or full automation once confidence is established

Unlike standalone tools, Agentic AI is part of a unified AppSec platform that reduces risk, shortens time to remediation, and accelerates secure innovation. Security leaders will learn how to embed security seamlessly into development pipelines and leverage AI to drive both security and speed across the SDLC.

• Building security measures into every phase of the SDLC, enhancing efficiency, reducing risks, and bolstering trust
• Adopting early-stage vulnerability detection to mitigate risks before they escalate, ensuring safer and smoother production
• How can you define comprehensive policies and guidelines to unify team actions and maximise the effectiveness of security tools and technologies?
• Encouraging ongoing skill development and adaptive strategies to meet evolving security challenges head-on

Speakers:

Zhou Zhihao Vice President ISC2 SG Chapter

Dan Haagman CEO Chaleit & Honorary Professor Murdoch University

Speakers:

Selina Seah Head of IT Shared services, IT Business Partner Income

Dan Haagman CEO Chaleit & Honorary Professor Murdoch University 

• How do we build security and compliance into fast-moving pipelines without becoming a bottleneck?
• Can trust be codified — and if so, who owns it?
• What role will automation, AI, and policy-as-code play in scaling secure development across the enterprise?