Building Security In—DevSecOps
summary
Comcast describes a DevSecOps program that replaces human gating with automation to enable much faster, safe deployments using DevOps teams. It explains a six-part approach—including executive sponsorship, developer craftsmanship, a secure development lifecycle (SDL), and tooling—focused on making security an integrated, easy part of the end-to-end product lifecycle rather than an afterthought.
AI-written summary · about
chapters (10)
- 0:00Start
- 4:06SECURITY PRACTICES ON DEVOPS CONTINUUM → DEVSECOPS
- 8:31COMCAST SDL GUIDING PRINCIPLES
- 11:51SDL PROGRAM ENGAGEMENT MODEL
- 14:59SECURITY MATURITY MODEL EXAMPLE
- 18:25THE COMCAST SECURITY GUILD
- 20:24TECHNOLOGIST TRAINING LEVELS OF LEARNING AND DEVELOPMENT
- 22:12COMCAST SECURITY CRAFTSMANSHIP MAKE RIGHT THING TO DO = EASY THING TO DO
- 35:03Apply What You Have Learned Today
- 44:14RSAConference 2019
related talks
53mFrom DevOps to DevSecOps
50mProduct Security at Scale: Lessons from Comcast
06mDevSecOps – Security Throughout the DevOps Pipeline
04mThe relationship between DevOps and security
47mCloud Computing: DevSecOps — security all the way
38mDevSecOps - what does it mean and where is it taking us?
36mHow to Turn DevOps into DevSecOps
31mWhy SecDevOps is the new way in Cybersecurity?