It’s pronounced ‘DevOps.’ The ‘Sec’ is silent

"I have a DevOps team, so why is it still so painful to release software?" DevOps has been a hot buzzword for a decade. Like Agile before it, many now claim to be doing some degree of DevOps. But looking more closely, software release processes are still slow and manual. A common roadblock in making the path to production frictionless and automated is security. Late-stage security checks catching vulnerabilities that need rework. Lack of adherence to security architecture requirements. Manual approaches to remediation. Combined with ever-growing concern over security breaches and the need to solve for the security in DevOps is heightened. Hence, the rise of DevSecOps. Arguably, if you're doing DevOps right, you've solved for security. But, clearly, that's not happening on its own. In this talk, Dormain Drewitz will discuss: - Why the measures of success don't change from DevOps to DevSecOps—but are critically important - What technologies support secure software delivery - How a product mindset facilitates continuous improvement in the face of change