2020 Boston Virtual Symposium Security Learns to Sprint: DevSecOps

With a ratio of 100/10/1 for Development, Operations, and Security, security now needs to concentrate on creating tools, processes and opportunities for dev and ops that result in more-secure products, instead of trying to do it all themselves like they did in days past. We must build security into each of “The Three Ways: Automating and/or improving efficiency of all security activities to ensure we don’t slow down developers Speeding up feedback loops for security related activities so that we fix the bugs faster and sooner Providing continuous learning opportunities in relation to security, for both teams