3 Secure Development Lifecycle

DOI: 10.1201/9781003404354-3

3.1 DevSecOps

Transitioning to a DevOps architecture or the cloud, and rebuilding applications require significant changes in technological oversight and resources. Changes to the development teams and internal procedures are required to provide the agility needed within a DevOps environment. Specifically, activities such as: 1) team members, roles and responsibilities need to be redefined, and 2) adopting new tools. In addition, incorporating security requirements and risk management practices within the DevOps lifecycle is important to address potential security threats.

Development, Security, and Operations (DevSecOps) integrates security requirements into the DevOps process. ...

Get Optimal Spending on Cybersecurity Measures now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.