Effective DevSecOps
One of my favorite Engineers who shall remain nameless despises the word “DevSecOps” for it has become a cliche in the industry. However, the ideas the DevSecOps practices represent are effective when applied in their spirit. I have seen these practices transform a teams’ risk, improve delivery and the user experience for everyone. Security is no longer a bogeyman, but another feature of the service. When effective teams stop seeing security scans as anxiety-inducing purity tests. Instead, they are safety checks that are automated, and where vulnerabilities are triaged and mitigated like any other user story. The transformation is real and effective, but requires sponsorship and leaning in from all stakeholders.
...read more