Hands-On Security in DevOps

Privacy by design

The team realizes the importance of privacy and also receives some awareness training related to privacy laws. However, there is still a gap between translating the legal languages into technical security requirements. The CTO would like the security team to help to provide common privacy design solutions and to make privacy by design manifest in technical guidelines for the software engineering team. As well as having the existing data tasking implementation being done by each project team, the CTO plans to have common libraries for consistent data-masking behaviors and to reduce implementation efforts across the teams. There are also other issues raised by the operation, such as sensitive information classification and ...