book

Intelligent Continuous Security

Name: Intelligent Continuous Security
Author: Marc Hornbeek
ISBN: 9798341615915

by Marc Hornbeek

June 2025

Intermediate to advanced

316 pages

10h 4m

English

O'Reilly Media, Inc.

Read now

Unlock full access

Includes

Quizzes

Foreword
Preface
Conventions Used in This BookO’Reilly Online LearningHow to Contact UsAcknowledgments
1. Introduction to Intelligent Continuous Security
Definition and OverviewHistory of DevSecOps and SecOpsDefinition of Intelligent Continuous SecurityImportance of Intelligent Continuous Security in the Modern Threat LandscapeDevSecOps Risk LandscapeSecOps Risk LandscapeContinuous Security Risk LandscapeRegulatory and Compliance LandscapeRegulatory LandscapeCompliance LandscapeReal-Time Compliance and Security AuditsSummary
2. From DevSecOps and SecOps to Intelligent Continuous Security
Limitations of Separate DevSecOps and SecOps PracticesLimitations of the DevSecOps Approach to Software SecurityLimitations of the SecOps Approach to Software SecurityThe Need for an Integrated Continuous Security ApproachContinuous Security: An Integrated SolutionMitigating Exploits with ML for Continuous SecurityAI-Augmented Tools for Continuous Monitoring and ResponseGenerative AI and Its Vital Role in Intelligent Continuous SecuritySummary
3. Foundations of Intelligent Continuous Security
Core Principles and ConceptsSecurity Embedded in Every PhaseProactive, AI-Driven Threat MitigationAutomation and ScalabilityUnified Collaboration Across TeamsContinuous Improvement and AdaptabilityWhat AI Can Do for Continuous SecurityProactive Threat Detection and PreventionSecurity Workflow AutomationReal-Time Incident ResponseEnhanced Threat IntelligenceContinuous Monitoring SupportAdaptive Learning and ImprovementCollaboration Across TeamsConclusionLimitations and Pitfalls for AI and Continuous SecurityData Quality and BiasOverreliance on AutomationFalse Positives and Alert FatigueCost and Resource RequirementsLack of Transparency in AI DecisionsVulnerability to Adversarial AttacksEthical and Privacy ConcernsConclusionMaturity Levels of Intelligent Continuous SecurityContinuous Security Maturity Level ConceptsLevel 1: Initial (Ad Hoc and Unpredictable)Level 2: Managed (Defined at a Project Level)Level 3: Defined (Standardized Across the Organization)Level 4: Quantitatively Managed (Measured and Optimized)Level 5: Optimized (Adaptive and Continuous Improvement)Intelligent Continuous Security ConceptsLevel 1: Initial (Ad Hoc and Unpredictable)Level 2: Managed (Defined at a Project Level)Level 3: Defined (Standardized Across the Organization)Level 4: Quantitatively Managed (Measured and Optimized)Level 5: Optimized (Adaptive and Continuous Improvement)Intelligent Continuous Security Pillars of PracticeAI-Driven Continuous Security CultureIntelligent Continuous Security Awareness and TrainingIntegrated Security LifecycleAutomated and Adaptive Security TestingProactive Security Risk IntelligenceIntelligent Incident ResponseContinuous Security Monitoring and Predictive ComplianceSecurity Feedback Loops and Continuous EvolutionSummary
4. Empowering Teams
Roles and ResponsibilitiesAI Center of ExcellenceCollaboration StrategiesTeam Topologies for Intelligent Continuous SecurityTeam Topologies That WorkTeam Topologies to AvoidOvercoming Team ChallengesSummary
5. Generative AI and Machine Learning for ICS
Generative AI for Continuous SecurityMachine Learning for Continuous SecurityCombining Generative AI and Machine Learning for Continuous SecurityAI and ML Technologies for Continuous SecuritySecure Supply Chain Management: Safeguarding DependenciesEvaluating and Selecting AI Technologies for AI-Assisted Continuous SecurityThe Importance of a Methodical ApproachA Stepwise Process for Evaluation and SelectionValidating the ChoiceEthical Considerations in Evaluating AI Technologies for Security ApplicationsThe Stakes of Ethical MisstepsIncorporating Ethical Considerations into the Evaluation ProcessGovernance and Accountability: Balancing Security and EthicsSustaining AI Technologies in Security ApplicationsSummary
6. Seven-Step Transformation Blueprint for ICS
Seven Transformation Blueprint StepsStep 1: Leadership VisioningStep 2: Team AlignmentStep 3: Discovery and AssessmentStep 4: Solution MappingStep 5: RealizationStep 6: OperationalizeStep 7: ExpansionTransformation Implementation PracticesThe Role of the Transformation ConsultantAI-Assisted Tools and AI-Generated TemplatesPhase-by-Phase BreakdownThemes in the ICS Implementation RoadmapTheme 1 Example: AI-Enabled Security MVPTheme 2 Example: Standardization and ScalingTheme 3 Example: Coverage ExpansionTheme 4 Example: Optimization and Continuous ImprovementWhy This Approach WorksContinuous Security Macro-Flows (Epics)AI-Assisted TemplatesAI-Assisted Micro-Flows (Stories)Common Pitfalls and Challenges: Sustaining ICS SolutionsSummary
7. ICS Technologies
ICS Technology FrameworksThreat IntelligenceVulnerability ManagementZero Trust ArchitectureSecrets ManagementIdentity and Access ManagementImmutable Infrastructure as CodeSecure Software Supply ChainSecurity ObservabilityDetection EngineeringSecurity MonitoringAutomated Security TestingConclusionICS Testing ToolsSoftware Composition AnalysisStatic Application Security TestingContainer Security TestingDynamic Application Security TestingInteractive Application Security TestingFuzz TestingPenetration Testing AutomationVulnerability ScanningThreat ModelingAPI Security TestingCloud Security TestingLoad Testing for SecuritySQL Injection TestingSecurity Compliance ValidationConclusionICS Integration PlatformsDIY Platforms: Custom-Built ICS IntegrationCI/CD Platforms: Embedding Security in Software DeliveryValue Stream Management Platforms: Security as a Business FunctionAutomated Release Orchestration Platforms: Secure Deployments at ScalePlatform Engineering: Security as a Service CapabilitySIEM: Centralized Threat VisibilitySecurity Orchestration, Automation, and Response: Automating Incident ResponseConclusionICS DashboardsICS Dashboard RequirementsICS Dashboard Solutions and Best PracticesICS Dashboard Challenges, Pitfalls, and SolutionsReal-World Example: The MOVEit Ransomware AttackICS Technology Governance ToolsGovernance PracticesGovernance ChallengesICS Technology Transformation ToolsDefining ICS Technology Solution Requirements and PrioritiesSelecting ICS Technology SolutionsMonitoring and Operating ICS Technology Solution PerformanceSustaining and Evolving ICS Technology SolutionsSummary
8. Real-World Applications and Use Cases
Large Enterprises with Siloed DevSecOps and SecOps TeamsSecurity Concerns in Typical DevSecOps and SecOps PracticesReal-World Organizations That Match This Use CaseHow ICS Practices Improve Security for Large EnterprisesSoftware Suppliers Separated from Their CustomersSecurity Concerns in Typical DevSecOps and SecOps PracticesReal-World Organizations That Match This Use CaseHow ICS Practices Improve Security for Software Suppliers and CustomersGovernment and Military Institutions Where Software Suppliers Are Separate from End ApplicationsSecurity Concerns in Typical DevSecOps and SecOps PracticesReal-World Organizations That Match This Use CaseHow ICS Practices Improve Security for Government and Military EnvironmentsNetwork Software Manufacturers Separated from Network Systems OperatorsSecurity Concerns in Typical DevSecOps and SecOps PracticesReal-World Organizations That Match This Use CaseHow ICS Practices Improve Security for Network Software and Network OperatorsCloud Service Providers and the Need for ICS PracticesSecurity Concerns in Typical DevSecOps and SecOps PracticesReal-World Organizations That Match This Use CaseHow ICS Practices Improve Security for CSPsFinancial Institutions Handling Large-Scale TransactionsSecurity Concerns in Typical DevSecOps and SecOps PracticesReal-World Organizations That Match This Use CaseHow ICS Practices Improve Security for Financial InstitutionsHealthcare and Pharmaceutical SectorsSecurity Concerns in Typical DevSecOps and SecOps PracticesReal-World Organizations That Match This Use CaseHow ICS Practices Improve Security for Healthcare and Pharmaceutical SectorsCritical Infrastructure Operators: Energy, Utilities, and TransportationSecurity Concerns in Typical DevSecOps and SecOps PracticesReal-World Organizations That Match This Use CaseHow ICS Practices Improve Security for Critical InfrastructureThe Benefits of ICS for Critical Infrastructure SecurityRetail and Ecommerce PlatformsSecurity Concerns in Typical DevSecOps and SecOps PracticesReal-World Organizations That Match This Use CaseHow ICS Practices Improve Security for Retail and EcommerceDevOps Teams in CI/CD Pipelines with High Deployment FrequenciesSecurity Concerns in Typical DevSecOps and SecOps PracticesReal-World Organizations That Match This Use CaseHow ICS Practices Improve Security for CI/CD PipelinesThe Benefits of ICS for High-Velocity DevOps TeamsOrganizations with Strict Regulatory and Compliance RequirementsSecurity Concerns in Typical DevSecOps and SecOps PracticesReal-World Organizations That Match This Use CaseHow ICS Practices Improve Security for Regulated OrganizationsMulticloud and Hybrid Cloud EnvironmentsSecurity Concerns in Typical DevSecOps and SecOps PracticesReal-World Organizations That Match This Use CaseHow ICS Practices Improve Security for Multicloud and Hybrid Cloud EnvironmentsAI and ML Workloads in Security-Sensitive EnvironmentsSecurity Concerns in Typical DevSecOps and SecOps PracticesReal-World Organizations That Match This Use CaseHow ICS Practices Improve Security for AI/ML WorkloadsSummary

9. Metrics for Intelligent Continuous Security
A Landscape View of ICS MetricsBusiness Outcome MetricsICS Effectiveness MetricsICS Transformation and Improvement MetricsRisk and Threat Exposure MetricsCompliance and Governance MetricsAligning Metrics with ICS GoalsBusiness Outcome MetricsICS Effectiveness MetricsICS Transformation and Improvement MetricsRisk and Threat Exposure MetricsCompliance and Governance MetricsICS Measurement ObservabilityThe Importance of ICS ObservabilityObservability Requirements Across ICS Metrics CategoriesDesigning an ICS Observability StrategyReal-Life Examples of ICS Observability DesignICS Security ArchitectureThe Five-Layer ICS Security Architecture ModelUse Case: Custom Dashboards for ICS Metrics CategoriesSustaining a Reliable ICS Metrics ArchitectureTactics for Ensuring Sustainability, Reliability, and AdaptabilityThe Consequences of Failing to Maintain a Sustainable ICS Metrics ArchitectureChoosing ICS MetricsPitfalls to Avoid When Choosing ICS MetricsBest Practices for Effective ICS Metrics SelectionSummary
10. The Future of Intelligent Continuous Security
Emerging Trends in Intelligent Continuous SecurityPeople: Emerging TrendsProcess: Emerging TrendsTechnology: Emerging TrendsPreparing for Future TrendsPreparing for People TrendsPreparing for Process Change TrendsPreparing for Technology TrendsSummaryFinal Thoughts
Appendix. Resources for Further Learning
BooksWebsitesArticles, Blogs, Ebooks, and WebinarsCourses and Certifications
Glossary of Continuous Security Terms
Index
About the Author

Overview

With AI in the hands of cybercriminals, traditional security controls and response mechanisms are swiftly moving toward obsolescence. Intelligent Continuous Security (ICS) helps organizations stay toe-to-toe with adversaries, replacing outmoded defenses with a cohesive strategy that unifies security across the entire software lifecycle.

Author Marc Hornbeek outlines the principles, strategies, and real-world implementations of ICS, including how to break down silos between DevSecOps and SecOps, how to measure and optimize security effectiveness, and how AI can transform everything from security operations to regulatory compliance. Security professionals, DevOps engineers, IT leaders, and decision-makers will learn how to move toward adaptive, self-healing defenses to keep pace with emerging risks.

Align security strategies with organizational goals
Implement AI-assisted Continuous Security across teams
Select and integrate AI-powered tools for vulnerability detection, automated compliance checks, and real-time incident response
Transition from reactive to proactive security to continuously adapt to emerging threats
Apply best practices to mitigate risks and avoid breaches

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Three Essentials for Agentic AI Security

Publisher Resources

ISBN: 9798341615908Errata Page

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills