Hands-On Security in DevOps

Further reading

• GDPR Privacy Impact Assessment: https://gdpr-info.eu/issues/privacy-impact-assessment/
• Adversarial Tactics, Techniques & Common Knowledge: https://attack.mitre.org/wiki/Main_Page
• SDL Threat Modeling Tool: https://www.microsoft.com/en-us/sdl/adopt/threatmodeling.aspx
• Elevation of Privilege (EoP) Card Game: https://www.microsoft.com/en-us/sdl/adopt/eop.aspx
• SP 800-100 Information Security Handbook: A Guide for Managers https://csrc.nist.gov/publications/detail/sp/800-100/final
• Software assurance marketplace: https://www.mir-swamp.org/
• NIST Resources from the Software Assurance Reference Dataset: https://samate.nist.gov/SARD/around.php
• NIST Test Suites: https://samate.nist.gov/SARD/testsuite.php
• NIST Security Recommendations ...