10 Attributes of the DevSecOps Elite
summary
Survey of 15,000 surveyed, 5,500 respondents across industries claims ten repeatable DevSecOps habits and shows concrete effects: mature DevOps teams deploy 350% more automated security across the SDLC, use twice as many third‑party cloud security tools, and surface vulnerabilities inside developer tools (GitHub, Jenkins, IDEs). Teams that update ~80% of dependencies per release ship markedly fewer flaws because newer components show far lower vulnerability rates; mature orgs also report far more training but one in five developers lacks awareness of an incident response plan.
AI-written summary · about
chapters (19)
- 0:00Introduction
- 2:31Community Survey
- 4:44Who participated
- 5:20Who made up the majority
- 6:17How important is security
- 7:44Survey responses
- 8:53Application security practices
- 12:21Automated security tools
- 13:54Cloudbased security
- 16:09Security tools
- 19:32Deployment speed
- 24:16Security
- 26:21Updating dependencies
- 30:23Open source components
- 31:10New vs old components
- 33:57Risk vs quality
- 35:18Training
- 37:09Response Plan
- 38:32Breach Awareness
related talks
53mDevSecOps Next: Navigating the Next Era with Industry Titans
15mKeynote: The Rise of DevSecOps
33mSecurity, Don't Fear the DevOps
51mDevOps is Now DevSecOps
27mDevSecOps: How to Use DevOps to Make You More Secure
39mDevOps: The Return of Security
30mThe 3 Ways of DevSecOps – Making Shift Happen
34mDevSecOps: How to Use DevOps to Make You More Secure