-
Book Overview & Buying
-
Table Of Contents
Executive's Cybersecurity Program Handbook
By :
Historically, security in the software development life cycle (SDLC) has not received as much attention as it should. We have built a defensive network security architecture to combat poor software design. Legacy systems that were introduced years ago, sometimes decades ago, with little to no documentation leave IT and security teams scrambling when a new software vulnerability is discovered. Supply chain issues have crept up in recent years, sabotaging legitimate software vendors and open source contributors.
The term DevOps, or development and operations, has been around for a long time. The term stems from the combination of these two teams working collaboratively. The software development team needs IT and operations in order to deploy their code to production. There are reasons for this, but it is mainly to maintain separation of duties. Many organizations, even today, do not provide this separation. This often leaves IT administrators...