Hacking the Business, not the Code - by Nadir Jabiyev, CISO at Xelon

In this talk, Nadir Jabiyev, CISO at Xelon Cloud, challenged the traditional view of cybersecurity. Instead of protecting code at the end of the process, he shows why true security starts with the business logic and system design itself.

Using real-world examples, Nadir demonstrates how flawed architecture, weak processes, and late-stage controls expose companies to unnecessary risks — and how Security-by-Design can prevent them. He introduces the PASTA threat-modeling framework, a practical method for aligning technical protection with business goals.

Key takeaways:

• How to identify business logic vulnerabilities early.

• Why proactive, risk-centric security beats reactive fixes.

• How to make security a strategic business advantage, not just an IT concern.

A must-read for anyone who wants to build secure, resilient, and business-aligned IT systems from the ground up.

Download