Firms that want to secure applications are challenged by understaffed security teams and lack of security awareness on the part of developers. Developer security champions are developers who act as a security point of contact in their team and embed application security where it’s needed most. Programs to create and support champions require investment and planning. When building a developer security champions program, consider how to make the case for it, put in place the right leadership, identify and train developer security champions, support and reward your champions, and measure success.