Why DevSecOps remains a mirage

2020-06-12 05:30

Despite the rhetoric around DevSecOps, security remains an afterthought when organizations are building software.

The surge in web app security breaches in 2019 further solidifies that we are a long way from delivering on the DevSecOps vision.

How can organizations make DevSecOps a reality? It's all about embedding security within all aspects of your software development process rather than having it as a clunky bolt-on at the end.

Security needs to shift earlier in the SDLC. Security must be part of each stage of your software development lifecycle.

Once you've broken down the "Security" monolith, it's much easier to get everyone involved in security, because you're not asking everyone to become a security consultant, just learn enough to deal with over 90 percent of threats.

News URL

http://feedproxy.google.com/~r/HelpNetSecurity/~3/dm1on2_XiXQ/

#devsecops