DevSecOps for the Enterprise

reportActive / Technical Report | Accesssion Number: AD1187371 | Open PDF

Abstract:

DevSecOpsis a cultural and engineering practice that breaks down barriers and opens collaboration between development, security, and operations organizations using automation to focus on rapid, frequent delivery of secure infrastructure and software to production. It encompasses intake to release of software and manages those flows predictably, transparently, and with minimal human intervention/effort. A DevSecOps Pipeline attempts to seamlessly integrate three traditional factions that sometimes have opposing interests: development; which values features; security, which values defensibility; and operations, which values stability. Not only does one need to balance the factions. They must do so in a way that balances risk, quality and benefits within their time, scope, and cost constraints.

Security Markings

DOCUMENT & CONTEXTUAL SUMMARY

Distribution Code:
A - Approved For Public Release
Distribution Statement: Public Release

RECORD

Collection: TRECMS
Identifying Numbers
Subject Terms