I have been toying with the idea for a while now about doing my first talk, on my last project I was building a Risk Management portal for information security so I had to read all about Risk Management frameworks like NIST & COBIT etc I then had to learn about stuff like PCI & ISO27001.
I kept finding articles from NIST about password policies, user management etc and it really helped with building the application and making it more secure. You can find a lot of this infomation over at OWASP but again do developers know about OWASP ?
Now my question is would a developer be interested in me talking about how you could use the NIST documents to apply a good password policy or user management policy among other cool stuff into there application to make it more secure ? It wouldn't be code specigic more the principals....
If you want any more info to give me a better answer I would gladly edit, but right now I am at work and wanted to do a brain dump