Nov 8, 2017 | Enterprise DevSecOps, Enterprise Threat Modeling
DevOps creates an environment which may be systemically flawed, in part due to a lack of operational visibility into application post-deployment. Ironically, the fundamental, underlying goal of DevOps is to create an environment in which both developers and operators...
Jun 14, 2017 | Enterprise DevSecOps, Enterprise Threat Modeling
Enterprise DevSecOps is the union of Agile development, security, and operations. Organizations have experienced some notable success in integrating two of the three pillars of long-term competitive advantage and strategy, alternately benefitting from DevSec, SecOps,...
Jun 6, 2017 | Enterprise DevSecOps, Enterprise Threat Modeling
Enterprise DevSecOps comes from enterprise threat modeling across the comprehensive attack surface. Both seek to infuse security’s perspective end-to-end throughout the enterprise DevOps environment. In our previous article on implementing DevSecOps through rolling...
May 24, 2017 | Enterprise DevSecOps, Enterprise Threat Modeling
Enterprise DevSecOps: the end-to-end infusion of security’s perspective within the existing enterprise DevOps environment. It is easy to talk about, and easy enough to write manifestos about it. However, practical implementation is far more challenging. To date,...