Skip to Content
10 Steps Every CISO Should Take to Secure Next-Gen Software
book

10 Steps Every CISO Should Take to Secure Next-Gen Software

by Cindy Blake
November 2019
Intermediate to advanced
86 pages
2h 16m
English
O'Reilly Media, Inc.
Content preview from 10 Steps Every CISO Should Take to Secure Next-Gen Software

10 Steps Every CISO Should Take to Secure Next-Gen Software

Context: DevOps Principles That CISOs Often Overlook

Sometimes, it can feel like developers and security are each speaking a different language. In some ways they are. Combine that with a massive sea change in which developers themselves are grappling with new and evolving development technologies, tools, and frameworks, and it’s a bit of the Wild West! Without going into too much detail, let’s highlight some critical areas to quickly get the security professional up to speed on the terms, what they mean, and why they are relevant to security.

Git What? Knowing the Lingo

Git, GitHub, GitLab: are they all the same thing? Should you care about the difference? It’s all for developers anyway, right? Why does it matter to security? Let’s begin by demystifying the terms around Git, understanding how it fundamentally changes the software development life cycle (SDLC), and looking at the security implications.

Git

Started in 2005, Git is a free and open source distributed version control system, used to help multiple software developers work on a given code base. The first distributed version control (BitKeeper) changed the workflow from the developer asking, “Can you add me to version control?” to making their own copy, changing the code, and then checking in their contribution. This change was revolutionary in that developers no longer needed to be invited to contribute to open source code repositories as well as proprietary ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

AirBnbBlueOriginElectronic ArtsHomeDepotNasdaqRakutenTata Consultancy Services

QuotationMarkO’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.
Julian F.
Head of Cybersecurity
QuotationMarkI wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.
Addison B.
Field Engineer
QuotationMarkI’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.
Amir M.
Data Platform Tech Lead
QuotationMarkI'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
Mark W.
Embedded Software Engineer

You might also like

Developing and Hosting Applications on the Cloud

Developing and Hosting Applications on the Cloud

Alex Amies, Harm Sluiman, Qiang Guo Tong, Guo Ning Liu
How to Develop a Great Digital Strategy

How to Develop a Great Digital Strategy

Jeanne W. Ross, Cynthia M. Beath, Ina M. Sebastian

Publisher Resources

ISBN: 9781492082910