State of DevOps Report Insights: Integrating Security into the Software Delivery Cycle
|
This talk will showcase some of the common patterns and practices that highly evolved DevOps shops have in place to enable tighter integration with security and will provide a practical roadmap for adopting and expanding DevOps success.
Over the past 8 years, Puppet has surveyed more than 30,000 technical professionals around the world in the most comprehensive and longest-running study on the topic of DevOps. The 2019 State of DevOps Report looked specifically at how organizations are integrating security into the software delivery lifecycle. We also recently collaborated with Snyk on the DevSecOps Insights Report, which cross-analyzes the data from the State of DevOps Report and Snyk’s State of Open Source Security Report. This presentation will showcase some of the common patterns and practices that highly evolved DevOps shops have in place to enable tighter integration with security. The talk will provide a practical roadmap for adopting and expanding DevOps success and focus on: How executing well on DevOps is key to enabling DevSecOps, the top 5 practices that increase your team’s confidence in your security posture, and common challenges of integrating security into the development lifecycle, especially in the middle phases where things tend to get messy.
Author Name: DevSecCon
Author Description:
DevSecCon is the global community dedicated to DevSecOps to help implement security in the overall development process. If you’re a security enthusiast & you want to learn more about how to better secure your team, then check out our community & resources.
Table of Contents
- State of DevOps REport Insights: Integrating Security into the Software Delivery Cycle
24mins
User Reviews
Be the first to review “State of DevOps Report Insights: Integrating Security into the Software Delivery Cycle”
Related Products
Introduction to Security Champion for Developers
A security champion is someone who acts as the de facto expert in security for their team. This course will cover how to use this path to increase your security knowledge, why it’s relevant to developers and how to become a security champion.
How to GRC Your DevOps
In this session, you'll learn about ways to calibrate GRC and DevOps needs so that they can work in reciprocal ways that benefit each other and not just meet their own goals in disconnected ways.
Shift Left, Shift Right: The DevSecOps Hokey Pokey
Garrett Gross, a Rapid7 Technical Advisor for Application Security, and Alyssa Miller, a Snyk Application Security advocate, come together to share how application security is evolving.
Windows 11 Troubleshooting: Security and Encryption
This course will teach you how to troubleshoot, diagnose, and repair security and encryption problems in Windows 11.
Developer Security Champion: API Security
This course will teach you about securing web-based APIs. It’ll get you thinking about attacks, defenses, and the resources you should be using.
IT Security Champion: Zero Trust
This course will teach you what Zero Trust is, the key tenets of Zero Trust, and a common use case to deploy it. The marketing fluff will be left aside, leaving you empowered to champion Zero Trust to your team.
There are no reviews yet.