At What Point Does DevSecOps Become Too Risky for the Business?
summary
Describes building an automated continuous risk pipeline that links cyber-resilience and compliance risk to DevSecOps teams at program and project levels. Explains integrating asset management, DevSecOps tooling, a policy-to-procedure platform, and a risk management platform to enable traceability.
AI-written summary · about
chapters (16)
- 0:00Introduction
- 2:01Agenda
- 3:50Risk from a Business Perspective
- 11:40Continuous Assessment
- 14:13Architecture
- 17:24Architecture Implementation
- 20:23The Gap
- 24:19Risk Policy Execution
- 25:34Case Management
- 34:29Do You Believe
- 36:39What is Next
- 40:01DevSecOps for the Business
- 42:22Questions
- 42:48The Problem
- 45:49The Mechanism
- 47:54The Model
related talks
04mThe relationship between DevOps and security
13mUnderstanding DevSecOps: Risk defense across your SDLC
50mSeamless Integration of Security Practices into the DevOps Pipeline
06mDevSecOps is a Misnomer
16mIntroduction to DevSecOps
30mDevSecOps: More Than Just Pipelines
36mHow to Turn DevOps into DevSecOps
06mDevSecOps – Security Throughout the DevOps Pipeline