Measuring DevSecOps: Building Metrics to Understand Effectiveness and Success
summary
A talk about measuring DevSecOps effectiveness by building concrete KPIs and a demo dashboard that aggregates outputs from static and dependency scanners into Azure DevOps. It describes tagging findings by pipeline stage, reporting counts before release, measuring time-to-fix and percent failing builds, and recommends starting with five KPIs (findings by severity, remediation lead time, escape-to-prod rate, test coverage, tool coverage) with graphs to persuade stakeholders and guide budgeting.
AI-written summary · about
chapters (4)
- 0:00Start
- 10:20Is Security a bottleneck for delivery speed?
- 16:09Measure outcomes versus outputs
- 25:49Security findings Burn Rate
related talks
51mMeasuring DevSecOps: building metrics to understand effectiveness and success
47mMeasuring DevSecOps
01h 00mTop 10 Metrics for Successful DevSecOps Projects
59mDevSecOps Productivity Metrics and Tools
42mData-Driven DevOps
33mMeasuring Developer Efficiency in DevOps: Key Questions, Metrics, Best Practices
29mMeasuring Devops Success with Pipeline Analytics
15mDelivering DevOps Business Metrics that Matter