Hands-On Security in DevOps

Security resource pool

The key advantage to keeping security members within one dedicated security team is to allow security knowledge sharing across projects and be able to deliver tools or best practices for the whole organization. However, for security practices to bake into DevOps practices requires a certain level of involvement for DevOps and security teams. Therefore, the CTO lists the all-year project plan for the CSO as a reference to plan the security team's involvement with projects. The CSO allocates security members to participate in different projects. The security members dot line report to the project manager during the period of a project assignment. It works for a while but there are some issues under this kind of organization ...