How to better navigate the world of DevSecOps with Sonatype and Saltworks Security
3 minute read time
Sonatype and Saltworks talk about how to deliver higher quality software faster while securely taking advantage of everything open source has to offer.
Read More...
Getting Your Security Program to Shift Left: Operationalizing Security Controls via DevSecOps
3 minute read time
Map the automation opportunities into your software development lifecycle as part of coordinated strategies to shift security left.
Read More...
Ryan Lockard Names the Seven Deadly Sins of DevSecOps [VIDEO]
1 minute read time
Failures are an opportunity to reflect, inspect, and improve DevSecOps practices every day. Which of these have you experienced, and what did you learn?
Read More...
Sladjana Jovanovic and Bill McArthur Move Silos to Communities [VIDEO]
2 minute read time
When we break down the barriers to communication and collaboration, we thrive as humans and as organizations. Sladjana Jovanovic shares her experiences.
Read More...
Why Manual Verification Still Matters
4 minute read time
We continuously hear the benefits of automation. Jeroen Willemsen explains why we still need to perform manual checks.
Read More...
For Distributed Teams, It’s Not All About the Tools
4 minute read time
A great distributed team starts with people with strong collaboration skills. The team needs time to understand each other's preferences to deliver value.
Read More...
Larry Maccherone Says Pixie Dust Security is an Epic Failure [VIDEO]
1 minute read time
A fundamental DevSecOps failure, according to Comcast's Larry Maccherone, is believing that a sprinkle of pixie dust makes a completed application secure.
Read More...
What Does the New CVSS 3.1 Scoring Model Mean for Enterprise Security?
3 minute read time
Learn how CVSS 3.1 is different from earlier versions and why changes to this security rating matters.
Read More...
Get the Latest DevSecOps Reference Architecture
2 minute read time
Based on community feedback the 2020 DevSecOps Reference Architecture now includes continuous education, mobile delivery, and rearrangement of controls.
Read More...