Hands-On Security in DevOps

Security technical committee (taskforce)

As the project team is getting large, and the number of projects is also rapidly growing. John and Peter decide to form a security technical committee, which is a virtual taskforce team to encourage team involvement in security and also to enable security knowledge sharing across projects. They form three taskforce teams—secure design, secure coding, and the secure testing taskforce team. Take the secure design taskforce team as an example—the team consists of one or several secure design experts from the security team, and also a developer representative from every project team. The developer representative is like a security champion of the project team. He will join in the security discussion with ...