Ten DevSecOps Culture Failures
summary
The presenter lists ten concrete DevSecOps failures and gives actionable remedies: replace the infinity graph with explicit pipelines not infinity graphs, use DJ Schleen draw.io templates to map flows, consult GitLab 2022 survey showing security as developers’ top pain, adopt OWASP tools like dependency-check and dependency-track for SCA, follow the DevSecOps maturity model for stepwise progress, prefer a minimal policy when adding scanners, coach developers with drop the no try yes if, and embed threat modeling (see Threat Modeling Manifesto) into tickets.
AI-written summary · about
chapters (8)
- 0:00Start
- 9:26Pipelines, not infinity graphs
- 12:25Security and coding is for everyone
- 16:21Embrace the reality of YOUR DevOps
- 17:15Big company envy
- 20:02Security front, right, left, and center
- 22:40Start simple, live simply
- 37:06Questions?
