Essential Practices on Seamless User Experience Across Platforms

Enterprises have embraced cloud computing to unlock the opportunity offered by digital transformation. The cloud’s flexibility and agility enable enterprises to grow their business without borders and ensure productivity and efficiency.

While enterprise applications continue to migrate to the cloud, the necessary change in the wide area network (WAN) is often overlooked. The hub-and-spoke WAN architecture that served the needs of the enterprise when applications were delivered from the datacenter, must evolve to serve the needs of the era of cloud applications. Software-defined WAN (SD-WAN) is the WAN's response to this paradigm shift in application traffic to the cloud.

While SD-WAN has emerged as a key enabler of secure and seamless direct cloud application access with the benefits of transport independence, better security and path selection, it has brought into focus the importance of the transport underlay and the technology investment — both past and future — that an enterprise needs to consider before adopting SD-WAN.

This webinar spotlights two critical success factors for driving mainstream enterprise adoption of SD-WAN:

*Predictable and robust Internet connectivity
*Investment protection (of installed legacy network equipment or in new technology) as the WAN evolves to support applications delivered from the cloud.

Join us at this webinar as we make sense of SD-WAN adoption for your company.

Digital revolution has been happening at a fast pace. Things are constantly changing, and companies either play a catch-up game or lead the revolution. This webinar helps you consciously choose how to respond to the digital revolution.

We will discuss the six levels of energy that helps build consciousness around the decisions we make. Then we discuss how these six levels of energy apply to the digital transformation. This helps the companies know where they are and where they want to be with respect to the digital revolution so that they can consciously take action steps in moving closer towards the company's goals.

About the speaker:
Aditya Guthey is a performance coach who helps engineers perform at their peak. An engineer by craft, he offers keynotes, workshops, group, and individual coaching to help create high performing engineering teams.

Over the last few years, a major shift has occurred in the Quality Assurance (QA) and Software Testing Management space. Organizations are adopting smart test automation, but continue to find the need for traditional PMO-level reporting offered by tools like Micro Focus ALM and Quality Center. Often, this results in a tool mismatch that negatively impacts the ability to report in real-time across all phases of manual and automated testing.

Smart test automation is no longer a “nice to have” but rather a foundational aspect of the testing process, and this is impacting the toolchain. Organizations are adding new test management tools like Selenium, Tricentis Tosca and others to their suite to better align with their Agile and test automation efforts. Global QA Directors are recognizing a multi-vendor and multi-tool approach to software quality assurance with commercial and open-source tools yields the best results.

With test planning, design, execution, and reporting now split across multiple tools, organizations have lost their visibility into key QA metrics for measuring manual vs. automated test execution effectiveness, test automation progress, automated testing execution progress, and defect remediation for all phases of the software testing lifecycle.

Join Senior Value Stream Architect, Matt Angerer, to learn how Tasktop can help you:

•Modernize test management by adding new, specialized tools for test automation
•Improve collaboration between QA teams working in their preferred tools of choice
•Eliminate the laborious effort of manual synchronization and report generation
•Centralize test data from automated and manual tests spanning multiple tools and instances for real-time reporting

The concept of “shift left” engages security earlier in the development cycle of cloud-native applications, accelerating development while reducing risk. However, migrating to cloud-native environments also necessitates the security team to “shift up”, focusing on the application layer to account for the shared-service model and “thin OS” environments that are prevalent in these environments.

Attend this webinar to learn why Shifting Up provides improved security and cost efficiency in cloud-native environments, including:

- Kubernetes orchestrated applications
- Containers running on VMs
- Serverless containers (e.g., AWS Fargate and Azure Container Instances)
- Serverless functions (e.g., AWS Lambda and Azure Functions)

We've spent six years studying secure coding practices of DevOps and Continuous Delivery organizations by surveying over 15,000 IT professionals. We've analyzed their staffing practices, educational priorities, automation choices, and process improvements that improve their cybersecurity preparedness. Our study has also uncovered details of where automation fails, awareness falls short and breaches happen.

Come participate in this session where we will share the 10 habits practiced by the DevSecOps Elite that you can then apply to -- or further mature within -- your own organization. We will also uncover what our analysis revealed about securing CI/CD pipelines, including what popular Jenkins plug-ins are used for security.

Learning objective:
We've spent six years studying secure coding practices of DevOps and Continuous Delivery organizations. Learn the 10 habits practiced by the DevSecOps Elite -- including their approaches to training, process, and automation -- that you can apply to your own organization.

Over the last few years, a major shift has occurred in the Quality Assurance (QA) and Software Testing Management space. Organizations are adopting smart test automation, but continue to find the need for traditional PMO-level reporting offered by tools like Micro Focus ALM and Quality Center. Often, this results in a tool mismatch that negatively impacts the ability to report in real-time across all phases of manual and automated testing.

Smart test automation is no longer a “nice to have” but rather a foundational aspect of the testing process, and this is impacting the toolchain. Organizations are adding new test management tools like Selenium, Tricentis Tosca and others to their suite to better align with their Agile and test automation efforts. Global QA Directors are recognizing a multi-vendor and multi-tool approach to software quality assurance with commercial and open-source tools yields the best results.

With test planning, design, execution, and reporting now split across multiple tools, organizations have lost their visibility into key QA metrics for measuring manual vs. automated test execution effectiveness, test automation progress, automated testing execution progress, and defect remediation for all phases of the software testing lifecycle.

Join Senior Value Stream Architect, Tina Dankwart, to learn how Tasktop can help you:

•Modernize test management by adding new, specialized tools for test automation
•Improve collaboration between QA teams working in their preferred tools of choice
•Eliminate the laborious effort of manual synchronization and report generation
•Centralize test data from automated and manual tests spanning multiple tools and instances for real-time reporting

To win with DevOps, you need to be aware of potential issues and know how to overcome the challenges so that you can make the most of its benefits.

With the incredible growth of DevOps in a short space of time comes numerous questions about how best to adopt it. From insights and driving factors of adoption - to dealing with legacy systems and incorporating robust security features - join our panel of experts to hear advice and learnings from those at the forefront of DevOps adoption.

Panelists:
Brad Schick, CTO, Skytap
Jeremy Brown, Director, Red Hat Open Innovation Labs - EMEA, Red Hat
Daniel Breston, Technology Leadership Transformation Coach, Virtual Clarity

Securing code during development increases speed to market and reduces cost – but developers can resist security testing if it’s disruptive to their workflow. That’s why planning your application security program with developer tools and processes in mind often means the difference between success and failure. This session will help you understand how, where, and when application security fits into a modern development organization.

Key Takeaways:
•Learn how to make security invisible, automate security checkpoints and integrate with popular tools like IDEs, ticketing, bug tracking, and build systems.
•Scan as early as possible in the Software Lifecycle, as early as when code is written in an IDE.
•How to proactively approach open source code your developers are using.

Sounds easy this Digital Transformation thing. Everyone apparently is doing it. Save a bunch of money. Makes customers happy. Our organisation looks good in the press or on the stock market. Hey – we don’t even have to do it as we can outsource everything to someone else! Nirvana!

Really? I mean REALLY? What percentage of these initiatives do not meet their expectations? What percentage of these initiatives instead make customers unhappy, or cause staff to leave or cost you money because you did not consider what these 2 words REALLY mean?

Let’s discuss what Digital Transformation can mean to you in what I hope is an interactive session on language, leadership expectations, metrics, basic tools you need, challenges, outcomes and the impact on your people. This is not a technical session. This is a discussion for leaders at any level on how to best engage the new industrial movement of our time best known as Digital Transformation.

About the speaker:
Daniel Breston was a technology leader at some level for over 3 decades for large financial services organisations in the USA and UK. Now at Virtual Clarity, Daniel coaches leaders that want to benefit from or lead technology teams to help organisations do better things faster and safer. You can also find Daniel speaking at ITSM, DevOps or local conferences or join him in discussion blogs.

This webinar will provide a comprehensive look at the security features of the Azure DevOps CD/CD platform. The topics include built-in security features such as user access controls and branch policies; and an overview of best practice for the incorporation of various 3rd party security tooling such as Veracode Greenlight within your pipeline.

Other topics include best practices for pipeline telemetry, reporting, pipeline protection and templates for security best practices. Whether you are a software developer using Azure DevOps, a security manager or a DevOps expert this webinar should further enhance your expertise in secure software delivery with Azure DevOps.

Register for this live webinar where Colin Domoney - DevSecOps Consultant at Veracode - will leave you with a clear understanding of how to Secure your DevOps Pipeline.

Application security is “shifting left.” As the responsibility for ensuring the stability and security of software shifts to developers, what does this mean for security professionals? What does their job look like if developers are responsible for security testing?

Learn:
•What the security professional’s role and responsibilities look like in a DevSecOps shop
•The DevSecOps cultural changes that will affect security
•The attributes that security tools will need in this new landscape
•Best practices for security professionals looking to not only survive, but thrive, in a DevSecOps world

In our recent State of Software Security Volume 9 report, Veracode examined fix rates across 2 trillion lines of code shows that the number of vulnerable applications remains staggeringly high. More than 85 percent of all applications contain at least one vulnerability following the first scan, and more than 13 percent of applications contain at least one very high severity flaw.

One thing is certain: the sheer volume of vulnerabilities present in most organizations’ application portfolios makes it necessary for them to make daily tradeoffs between security, practicality, and speed.

There are just too many vulnerabilities for organizations to tackle all at once, which means it requires smart prioritization to close the riskiest vulnerabilities first. For the first time, our report shows a very strong correlation between high rates of security scanning and lower long-term application risks, which we believe presents a significant piece of evidence for the efficacy of DevSecOps. In fact, the most active DevSecOps programs fix flaws more than 11.5 times faster than the typical organization, due to ongoing security checks during continuous delivery of software builds, largely the result of increased code scanning.

Join guest presenter Amy DeMartine, Principal Analyst, Forrester Research Inc., and Veracode’s Chris Eng as they deliver valuable takeaways for business leaders, security practitioners and development teams seeking to secure their applications. Listeners will learn potential prioritizations and software development methods that could help their organizations reduce risk more quickly.

All our preceding sessions have described the key elements of a shift to DevSecOps. Now get practical tips, best practices and next steps on migrating to DevSecOps from our panel of experts. During this session, we will continue the conversation in an open discussion format and break for audience Q&A.

Bring your questions and get ready to contribute your thoughts and ideas during this “ask the experts” session.

Chris Wysopal - Chief Technology Officer - Veracode
Paul Keim - Senior Security Architect - Cox Communications
Pejman Pourmousa - Vice President, Services - Veracode

Securing code during development increases speed to market and reduces cost – but developers can resist security testing if it’s disruptive to their workflow. That’s why planning your application security program with developer tools and processes in mind often means the difference between success and failure. This session will help you understand how, where, and when application security fits into a modern development organization.

Key Takeaways:
•Learn how to make security invisible, automate security checkpoints and integrate with popular tools like IDEs, ticketing, bug tracking, and build systems.
•Scan as early as possible in the Software Lifecycle, as early as when code is written in an IDE.
•How to proactively approach open source code your developers are using.

We will talk about some of the lessons learned with our customers, and techniques that can be used with Atlassian products and Apps, to improve DevOps collaboration. We discuss a recent implementation using Tempo Timesheets, whereby a large customer needed to record the time of engineers as painlessly as possible, in order to accurately capture their capital expenditure.

We will then describe how silos can be broken down using the Atlassian products, from requirements, through to testing, and ultimately customer service, using Confluence, Jira Software, Zephyr for Jira, and Jira Service Desk.

We will also show how a product like Sonatype/Nexus can be added into the CI/CD pipeline, reducing exposure to vulnerabilities from open source libraries, whilst still allowing developers to work at the same speed.

Using tools effectively will help underpin DevOps collaboration. DevOps is all about culture – but using tools provides a framework for change.

Chris’s company, BDQ, is an Atlassian Solution Partner. Chris has been in the software industry for over 20 years, and understands the full lifecycle of the software business, working from initial concept to delivered product. BDQ delivers consultancy, training, and integration to a range of customers, such as Clarks, Ocado, Direct Line, Legal and General, BetWay and Compare the Market.

DevSecOps is moving beyond the buzzword stage and into the real world. But there are obstacles standing in the way of widespread adoption. Perhaps the biggest obstacle is a lack of understanding about what DevSecOps is, which can discourage IT leaders, developers, and security teams who fear that it is a bridge too far to cross from DevOps, let alone Waterfall and Agile methodologies. Despite these myths and doubts, DevSecOps is producing real results in organizations that embrace it. For example, Veracode’s analysis of thousands of application scans found that applications scanned for security flaws early in the development process had a 48% higher fix rate (reduction in flaws) than other applications.


In this keynote address, Veracode General Manager Sam King will introduce the concepts of DevSecOps that will form the basis of this virtual summit. Sam will discuss:

-A simple definition of what DevSecOps is, beyond the hype and the myths, and why it holds promise for bringing together the assurances of AppSec with the speed and agility of DevOps

-Why the evidence says that DevSecOps is attainable in the real world – how Veracode scanning data shows that there is a genuine shift to DevOps and DevSecOps happening, one step at a time.

-Overview of the challenges that stand in the way – cultural, process, and technological – and how best practices can break down barriers to change.

-Welcome to speakers and setting the stage for what you should expect and come away with from the event.

The shift to the cloud is about breaking down traditional barriers and opening new lines of communication and collaboration to solve problems. If you have already implemented DevOps practices in your organisation you will find it much easier to transition to the cloud.

Why? Because cloud transformation requires significant collaboration between different teams. Because cloud adoption is complex a diverse, cross-functional team with experience and perspectives from around the company, can help create a collaborative environment that enables success.

In this talk you will learn:

How to manage the cultural shift required for a successful cloud project;

How to build cross-teams, establish processes, adopt new tools and define KPIs;

How to identify areas for improvement, increase agility and efficiency.

The first step in DevOps implementation at scale involves building a solid foundation of tooling, automation, architecture and testing to provide a standardised level of consistency for development teams to build upon. But where to from here?

How do we move from dedicated DevOps engineering teams to a robust DevOps capability ingrained within multi-disciplinary teams?

What steps can we put in place to ensure DevOps works effectively at scale?

When we acknowledge that scaling DevOps is really about strengthening DevOps capabilities within development teams, we can identify which capabilities are core to our delivery process, how we can strengthen and share these effectively across the wider development practice and which capabilities, if any, are better suited to sit outside of a development team when running at scale.

Join the 6point6 DevOps Director, Mark Debney, as he sets out the process for running robust and empowered DevOps at scale.

About the speaker:
Mark Debney, DevOps Director at 6point6

Mark is an IT infrastructure specialist with over 20 years’ experience in technology and computer systems. His expertise lies in systems architecture and he has built a number of large-scale high transactional platforms using agile and DevOps methodologies.

Mark is the Director for DevOps at 6point6, a leading technology consultancy, and helps to shape their DevOps offering with a focus on deploying DevOps at scale for Enterprise solutions.

Prior to joining 6point6 Mark spent eight years at BSkyB where he was a Principal Engineer and led the Platform as a Service team, assessing emerging technologies and implementing solutions across the wider DevOps group. Before BSkyB Mark held System Administrator roles at The Prytania Group, Reading Room, AM International and was an Electronics Technician in the Royal New Zealand Navy.