{"id":6912,"date":"2026-10-14T10:56:59","date_gmt":"2026-10-14T13:56:59","guid":{"rendered":"https:\/\/wearebigcheese.com\/sin-categorizar\/security-guardians-how-to-scale-security\/"},"modified":"2026-10-14T12:44:20","modified_gmt":"2026-10-14T15:44:20","slug":"security-guardians-how-to-scale-security","status":"publish","type":"post","link":"https:\/\/wearebigcheese.com\/en\/blog-en\/security-guardians-how-to-scale-security\/","title":{"rendered":"Security Guardians: How to Scale Security"},"content":{"rendered":"\n

Security Guardians: How to Scale Security<\/h1>\n\n

The underlying problem<\/h4>\n\n

In almost every organization, the security team is\u2014and will continue to be\u2014small relative to the rest of the organization. Meanwhile, the company grows: more product teams, more services, more AI agents, and more system integrations\u2014often accelerated by acquisitions. If the prevailing mindset is that security is \u201chandled by the security team,\u201d that team will sooner or later become a bottleneck, and security will begin to be perceived as what slows down delivery rather than what protects it. <\/p>\n\n

The instinctive response\u2014adding more people to the core team\u2014does not solve the root of the problem, because the gap between what the organization produces and what a core team can review widens with each new team. What does scale, however, is changing who is responsible for security. <\/p>\n\n

At BigCheese, we use the strategy described below, which is closely aligned with AWS’s ” culture of security<\/a> ” and, specifically, with the AWS Security Guardians<\/a> program.<\/p>\n\n

Culture of security vs. security culture<\/h4>\n\n

It is worth distinguishing between two concepts that are often confused. The security culture<\/strong><\/em> refers to the culture of the security team: its practices, its tools, and its way of working. The \u201cculture of security<\/em>,\u201d<\/strong> on the other hand, is a characteristic of the entire organization: the extent to which every team\u2014whether product, data, or operations\u2014takes security on as part of its job rather than delegating it. <\/p>\n\n

The goal is not for everyone to become security experts, but rather for security to cease to be the exclusive responsibility of a single department. The security team shifts from being the one who does the work to being the one who defines the framework, provides tools, and enables others; and each team takes ownership of the security of what it builds and operates. It\u2019s the same principle of shared responsibility that we already apply between the cloud provider and us, brought into the organization. <\/p>\n\n

What Is a Security Guardian?<\/h4>\n\n

A Security Guardian<\/a> is a member of a product or operations team who voluntarily takes on the role of security liaison within their team. They do not stop doing their job or become an auditor: they act as an extension of the security team within their own team\u2014the point of contact that brings security context to day-to-day decisions and, conversely, provides the central team with feedback on what happens in practice. This concept is even defined by AWS in its official documentation<\/a>. <\/p>\n\n

Its value is twofold. For the team, it brings safety awareness down to the level where technical decisions are made, so that best practices are discussed while they can still be implemented at no cost. For the security team, each Guardian acts as an early warning sensor: it detects friction, needs, and risks long before they reach a formal review, allowing the central team to expand its reach without increasing its size. <\/p>\n\n

How to Put Together the Program<\/h4>\n\n

A Guardians program isn\u2019t imposed\u2014it\u2019s built. It\u2019s best to start with a diverse group of volunteers representing different teams and backgrounds, rather than handpicking individuals, because the role thrives on genuine motivation. That initial group needs a clear organizational goal\u2014something that gives it meaning beyond simply \u201chandling security\u201d\u2014and real support from the core team in the form of training and mentoring so they can get started with confidence. <\/p>\n\n

From there, it is the community that sustains the program over time. Guardians need a space where they can continuously share knowledge, resolve questions, and compare experiences across teams, so that what one person learns becomes a shared resource for everyone. And they need their work to be measured and recognized: both through qualitative indicators\u2014such as the quality of the security conversations they facilitate\u2014and quantitative metrics, as well as through visible recognition that values the time they dedicate. An open and ongoing two-way feedback channel is what keeps the model alive and prevents it from degenerating into an empty title. <\/p>\n\n

AWS actually suggests how to incorporate guardians into operational teams in its Well-Architected documentation<\/a>.<\/p>\n\n

How the platform supports it<\/h4>\n\n

Culture is the hard part, but without the right tools, Guardians can\u2019t fulfill their role. The key is to give them visibility into their own team\u2019s security without forcing them to become specialists. Consolidating security findings and compliance controls in a single, shared location\u2014for example, using Security Hub<\/a> and Security Lake<\/a>\u2014and then presenting each Guardian with the security posture of their team or accounts on a dashboard tailored to their scope turns a flood of alerts into something actionable: each person sees what\u2019s relevant to them, within the context of their team. <\/p>\n\n

On that basis, the core team can define the controls and guardrails once and let each team apply them, so that the Guardian works within a common framework rather than coming up with its own criteria. Automation helps make the role sustainable: routing findings to the right team, automatically opening tickets, and reminding team members of pending tasks prevents the role from depending on people\u2019s willingness to review dashboards. This way, the Guardian can devote their time to what truly requires judgment, rather than to repetitive tasks that the platform can handle on its own. <\/p>\n\n

The Role of the Core Team<\/h4>\n\n

In this model, the security team doesn\u2019t shrink or lose relevance\u2014it changes its role. It shifts from reviewing every change to defining the framework, building the tools that the Guardians use, training the community, and arbitrating difficult decisions. In other words, its success is no longer measured by how many reviews it conducts but rather by how much security it ensures without direct intervention. <\/p>\n\n

That is the true sign of maturity in a culture of security<\/a><\/em>: when most good security decisions are made by the teams on a day-to-day basis, and the central team can focus on the risks that truly require its attention.<\/p>\n\n

\n
<\/div>

Sebasti\u00e1n Grattarola<\/p>

CTO de BigCheese, premier partner de AWS. Ayudo a fintechs, retails, y empresas de pagos de LATAM a construir en AWS con gobierno, seguridad y escala.<\/p><\/div><\/div>

Read MoreSecurity Guardians: How to Scale Security<\/span><\/a><\/div>\n","protected":false},"author":7,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"neve_meta_sidebar":"","neve_meta_container":"","neve_meta_enable_content_width":"","neve_meta_content_width":0,"neve_meta_title_alignment":"","neve_meta_author_avatar":"","neve_post_elements_order":"","neve_meta_disable_header":"","neve_meta_disable_footer":"","neve_meta_disable_title":"","neve_meta_reading_time":"","_themeisle_gutenberg_block_has_review":false,"footnotes":""},"categories":[91,1],"tags":[],"class_list":["post-6912","post","type-post","status-publish","format-standard","hentry","category-blog-en","category-sin-categorizar"],"yoast_head":"\nSecurity Guardians: How to Scale Security - BigCheese, AWS Premier Partner<\/title>\n<meta name=\"description\" content=\"Security Guardians, like on Amazon: how to scale security without expanding the team, with distributed ownership and a security lead on each team.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/wearebigcheese.com\/en\/blog-en\/security-guardians-how-to-scale-security\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Security Guardians: How to Scale Security - BigCheese, AWS Premier Partner\" \/>\n<meta property=\"og:description\" content=\"Security Guardians, like on Amazon: how to scale security without expanding the team, with distributed ownership and a security lead on each team.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/wearebigcheese.com\/en\/blog-en\/security-guardians-how-to-scale-security\/\" \/>\n<meta property=\"og:site_name\" content=\"BigCheese, AWS Premier Partner\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-14T13:56:59+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-14T15:44:20+00:00\" \/>\n<meta name=\"author\" content=\"Sebasti\u00e1n Grattarola\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Sebasti\u00e1n Grattarola\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/wearebigcheese.com\/en\/blog-en\/security-guardians-how-to-scale-security\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/wearebigcheese.com\/en\/blog-en\/security-guardians-how-to-scale-security\/\"},\"author\":{\"name\":\"Sebasti\u00e1n Grattarola\",\"@id\":\"https:\/\/wearebigcheese.com\/en\/#\/schema\/person\/2d20f75f6bf3cb236491676503e7ca39\"},\"headline\":\"Security Guardians: How to Scale Security\",\"datePublished\":\"2026-10-14T13:56:59+00:00\",\"dateModified\":\"2026-10-14T15:44:20+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/wearebigcheese.com\/en\/blog-en\/security-guardians-how-to-scale-security\/\"},\"wordCount\":997,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/wearebigcheese.com\/en\/#organization\"},\"articleSection\":[\"Blog\",\"Sin categorizar\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/wearebigcheese.com\/en\/blog-en\/security-guardians-how-to-scale-security\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/wearebigcheese.com\/en\/blog-en\/security-guardians-how-to-scale-security\/\",\"url\":\"https:\/\/wearebigcheese.com\/en\/blog-en\/security-guardians-how-to-scale-security\/\",\"name\":\"Security Guardians: How to Scale Security - BigCheese, AWS Premier Partner\",\"isPartOf\":{\"@id\":\"https:\/\/wearebigcheese.com\/en\/#website\"},\"datePublished\":\"2026-10-14T13:56:59+00:00\",\"dateModified\":\"2026-10-14T15:44:20+00:00\",\"description\":\"Security Guardians, like on Amazon: how to scale security without expanding the team, with distributed ownership and a security lead on each team.\",\"breadcrumb\":{\"@id\":\"https:\/\/wearebigcheese.com\/en\/blog-en\/security-guardians-how-to-scale-security\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/wearebigcheese.com\/en\/blog-en\/security-guardians-how-to-scale-security\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/wearebigcheese.com\/en\/blog-en\/security-guardians-how-to-scale-security\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/wearebigcheese.com\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Security Guardians: How to Scale Security\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/wearebigcheese.com\/en\/#website\",\"url\":\"https:\/\/wearebigcheese.com\/en\/\",\"name\":\"BigCheese, AWS Premier Partner\",\"description\":\"Think Big, Start Small\",\"publisher\":{\"@id\":\"https:\/\/wearebigcheese.com\/en\/#organization\"},\"alternateName\":\"BigCheese - AWS Premier Partner\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/wearebigcheese.com\/en\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/wearebigcheese.com\/en\/#organization\",\"name\":\"BigCheese, AWS Premier Partner\",\"alternateName\":\"BigCheese\",\"url\":\"https:\/\/wearebigcheese.com\/en\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/wearebigcheese.com\/en\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/wearebigcheese.com\/wp-content\/uploads\/2025\/03\/Logotipo-horizontal-Negro-1.png\",\"contentUrl\":\"https:\/\/wearebigcheese.com\/wp-content\/uploads\/2025\/03\/Logotipo-horizontal-Negro-1.png\",\"width\":278,\"height\":58,\"caption\":\"BigCheese, AWS Premier Partner\"},\"image\":{\"@id\":\"https:\/\/wearebigcheese.com\/en\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.instagram.com\/wearebigcheese\/\",\"https:\/\/www.linkedin.com\/company\/wearebigcheese\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/wearebigcheese.com\/en\/#\/schema\/person\/2d20f75f6bf3cb236491676503e7ca39\",\"name\":\"Sebasti\u00e1n Grattarola\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/wearebigcheese.com\/en\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/ae676062cabd9a8f7b0c14dd5e4db723ec306b06f485fc28ba80298c3b895512?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/ae676062cabd9a8f7b0c14dd5e4db723ec306b06f485fc28ba80298c3b895512?s=96&d=mm&r=g\",\"caption\":\"Sebasti\u00e1n Grattarola\"},\"description\":\"CTO de BigCheese, premier partner de AWS. Ayudo a fintechs, retails, y empresas de pagos de LATAM a construir en AWS con gobierno, seguridad y escala.\",\"sameAs\":[\"https:\/\/gravatar.com\/optimisticlollapalooza23032439a4\",\"https:\/\/www.linkedin.com\/in\/sebagra\/\"],\"url\":\"https:\/\/wearebigcheese.com\/en\/author\/sebagra\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Security Guardians: How to Scale Security - BigCheese, AWS Premier Partner","description":"Security Guardians, like on Amazon: how to scale security without expanding the team, with distributed ownership and a security lead on each team.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/wearebigcheese.com\/en\/blog-en\/security-guardians-how-to-scale-security\/","og_locale":"en_US","og_type":"article","og_title":"Security Guardians: How to Scale Security - BigCheese, AWS Premier Partner","og_description":"Security Guardians, like on Amazon: how to scale security without expanding the team, with distributed ownership and a security lead on each team.","og_url":"https:\/\/wearebigcheese.com\/en\/blog-en\/security-guardians-how-to-scale-security\/","og_site_name":"BigCheese, AWS Premier Partner","article_published_time":"2026-10-14T13:56:59+00:00","article_modified_time":"2026-10-14T15:44:20+00:00","author":"Sebasti\u00e1n Grattarola","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Sebasti\u00e1n Grattarola","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/wearebigcheese.com\/en\/blog-en\/security-guardians-how-to-scale-security\/#article","isPartOf":{"@id":"https:\/\/wearebigcheese.com\/en\/blog-en\/security-guardians-how-to-scale-security\/"},"author":{"name":"Sebasti\u00e1n Grattarola","@id":"https:\/\/wearebigcheese.com\/en\/#\/schema\/person\/2d20f75f6bf3cb236491676503e7ca39"},"headline":"Security Guardians: How to Scale Security","datePublished":"2026-10-14T13:56:59+00:00","dateModified":"2026-10-14T15:44:20+00:00","mainEntityOfPage":{"@id":"https:\/\/wearebigcheese.com\/en\/blog-en\/security-guardians-how-to-scale-security\/"},"wordCount":997,"commentCount":0,"publisher":{"@id":"https:\/\/wearebigcheese.com\/en\/#organization"},"articleSection":["Blog","Sin categorizar"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/wearebigcheese.com\/en\/blog-en\/security-guardians-how-to-scale-security\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/wearebigcheese.com\/en\/blog-en\/security-guardians-how-to-scale-security\/","url":"https:\/\/wearebigcheese.com\/en\/blog-en\/security-guardians-how-to-scale-security\/","name":"Security Guardians: How to Scale Security - BigCheese, AWS Premier Partner","isPartOf":{"@id":"https:\/\/wearebigcheese.com\/en\/#website"},"datePublished":"2026-10-14T13:56:59+00:00","dateModified":"2026-10-14T15:44:20+00:00","description":"Security Guardians, like on Amazon: how to scale security without expanding the team, with distributed ownership and a security lead on each team.","breadcrumb":{"@id":"https:\/\/wearebigcheese.com\/en\/blog-en\/security-guardians-how-to-scale-security\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/wearebigcheese.com\/en\/blog-en\/security-guardians-how-to-scale-security\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/wearebigcheese.com\/en\/blog-en\/security-guardians-how-to-scale-security\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/wearebigcheese.com\/en\/"},{"@type":"ListItem","position":2,"name":"Security Guardians: How to Scale Security"}]},{"@type":"WebSite","@id":"https:\/\/wearebigcheese.com\/en\/#website","url":"https:\/\/wearebigcheese.com\/en\/","name":"BigCheese, AWS Premier Partner","description":"Think Big, Start Small","publisher":{"@id":"https:\/\/wearebigcheese.com\/en\/#organization"},"alternateName":"BigCheese - AWS Premier Partner","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/wearebigcheese.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/wearebigcheese.com\/en\/#organization","name":"BigCheese, AWS Premier Partner","alternateName":"BigCheese","url":"https:\/\/wearebigcheese.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/wearebigcheese.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/wearebigcheese.com\/wp-content\/uploads\/2025\/03\/Logotipo-horizontal-Negro-1.png","contentUrl":"https:\/\/wearebigcheese.com\/wp-content\/uploads\/2025\/03\/Logotipo-horizontal-Negro-1.png","width":278,"height":58,"caption":"BigCheese, AWS Premier Partner"},"image":{"@id":"https:\/\/wearebigcheese.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.instagram.com\/wearebigcheese\/","https:\/\/www.linkedin.com\/company\/wearebigcheese\/"]},{"@type":"Person","@id":"https:\/\/wearebigcheese.com\/en\/#\/schema\/person\/2d20f75f6bf3cb236491676503e7ca39","name":"Sebasti\u00e1n Grattarola","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/wearebigcheese.com\/en\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/ae676062cabd9a8f7b0c14dd5e4db723ec306b06f485fc28ba80298c3b895512?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/ae676062cabd9a8f7b0c14dd5e4db723ec306b06f485fc28ba80298c3b895512?s=96&d=mm&r=g","caption":"Sebasti\u00e1n Grattarola"},"description":"CTO de BigCheese, premier partner de AWS. Ayudo a fintechs, retails, y empresas de pagos de LATAM a construir en AWS con gobierno, seguridad y escala.","sameAs":["https:\/\/gravatar.com\/optimisticlollapalooza23032439a4","https:\/\/www.linkedin.com\/in\/sebagra\/"],"url":"https:\/\/wearebigcheese.com\/en\/author\/sebagra\/"}]}},"_links":{"self":[{"href":"https:\/\/wearebigcheese.com\/en\/wp-json\/wp\/v2\/posts\/6912","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wearebigcheese.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/wearebigcheese.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/wearebigcheese.com\/en\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/wearebigcheese.com\/en\/wp-json\/wp\/v2\/comments?post=6912"}],"version-history":[{"count":4,"href":"https:\/\/wearebigcheese.com\/en\/wp-json\/wp\/v2\/posts\/6912\/revisions"}],"predecessor-version":[{"id":6923,"href":"https:\/\/wearebigcheese.com\/en\/wp-json\/wp\/v2\/posts\/6912\/revisions\/6923"}],"wp:attachment":[{"href":"https:\/\/wearebigcheese.com\/en\/wp-json\/wp\/v2\/media?parent=6912"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wearebigcheese.com\/en\/wp-json\/wp\/v2\/categories?post=6912"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/wearebigcheese.com\/en\/wp-json\/wp\/v2\/tags?post=6912"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}