The next iteration of DevOps
Mike Kail: As the industry has evolved, there are companies that have transformed into a culture of DevOps. In that situation, the question is, how do we shift left and bring them into the continuous integration and deployment pipeline? We need to inject security testing earlier on in the process from CodeCommit to the building and delivery stages. Security needs to be treated as a continuous loop instead of as a periodic approach to testing and compliance.
Viktor Farcic: Does that mean that by evolving toward including security, the industry is almost falling behind by not including it from the very beginning?
Mike Kail: Unfortunately, for the most part, security has always been a periodic set of tasks or processes. For example, when you did a pen test once a quarter, you might have done static code analysis every now and then, but they're all done manually. You need to think about how you start leveraging automation to make it part of that continuous...