From the course: DevOps Foundations

Unlock the full course today

Join today to access over 23,200 courses taught by industry experts.

DevSecOps: Making your systems more secure the DevOps way

DevSecOps: Making your systems more secure the DevOps way

From the course: DevOps Foundations

Start my 1-month free trial Buy for my team

DevSecOps: Making your systems more secure the DevOps way

“

- Tell me, was your last interaction with a security or compliance team enjoyable or not so much? A friend and coworker once told me, "You security people just want all the computers unplugged and powered off." I later went to a security event and the keynote speaker was talking about "stupid developers" who don't care about security. There's tension between information and security and other technical teams, but why? Originally, security was the job of system administrators and, to some degree, developers, but as InfoSec became a more complex field, specialization was required. Unfortunately, this created new silos, which spawned the same kind of issues as the walls between dev and ops. Those siloed security teams have different priority teams from the other technical teams, which leads to natural friction. Sometimes their focus is more compliance oriented and can seem like busy work to teams trying to build things for users. This problem gets worse because InfoSec tends to have few…

Contents