Shift Left, Shift Right, or Run Security Right Through The Middle?

Demands for more secure software and more rapid application development have led to the emergence of DevSecOps. DevSecOps maturity requires a risk-based approach to adding security activities, increasing depth, and improving testing governance. The best strategy is to shift from a reactive to a proactive security approach that injects security at the right time and place with automated continuous testing. This presentation covers these aspects of automated continuous testing: 1. Practices to avoid 2. Drawbacks 3. Prerequisites 4. When and where to use automated testing 5. Best practices for implementing and improving continuous testing throughout the development life cycle