Oh, East is East and West is West, and never the twain shall meet.
Rudyard Kipling
The twain shan’t meet, but collaborate.
Anonymous
An ounce of prevention is worth a pound of cure.
Benjamin Franklin
Never was so much owed by so many to so few.
The Right Honorable Sir Winston Churchill
“More meetings?” came the cry. “Please, no more meetings!”
It was a valid plea. The call had gone out for the development teams to work more closely with the security teams, and our work calendars had just been filled with architecture and design reviews, security audits, code security reviews, gates, and requests for our planned future release plans. There was starting to be very little time left to actually write any code.
We all knew security was important, critical even. But how security happened, how it was brought to and actioned by development teams, was the question. More meetings couldn’t be the way. Nor could a cacophony of new reviews. There had to be a better way. There had to be.
And there is. In this chapter, you’re going to see how your CNAPP is the collaborative glue between your development teams and your security-focussed teams, helping you get ahead of the game from the very first moments of your software development lifecycle, as shown in Figure 4-1.
Figure 4-1. The focus of this chapter is on how your CNAPP can bring security awareness ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month, and much more.
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.
Julian F.
Head of Cybersecurity
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.
Addison B.
Field Engineer
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.
Amir M.
Data Platform Tech Lead
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.
