Skip to main content

Why I am Excited to Attend the DevSecOps Engineering Class

Image
By
The opportunity exists to reinvent security and to do this we must redefine the roles and practices of security engineering. Information is available faster than the speed of your connection and cybersecurity risk is everywhere! 

Empowerment to change begins with getting level set on what DevSecOps (DSOE) really is and how to move fast to get there.  That is why I am excited to attend the DevSecOps Engineering class and to acquire the DevSecOps Engineer certification! 

Digital Transformations are not only real, they are accelerating. IT systems and software literally drive the world and that makes every business a digital tech business. Along with that is a proliferation of apps, devices and opportunities. Those opportunities are not always honorable; hackers abound. DevSecOps is a mindset that “everyone is responsible for security” with the goal of safely distributing security decisions at speed and scale to those who hold the highest level of context without sacrificing the safety required. 

As an IT professional, I want to be a part of THAT!

DevSecOps:
  • Ensures that security professionals are included as part of the DevOps team to helps Dev and Ops professionals understand
    • How their decisions need and affect security
    • How to work with security to decrease and respond quickly to attacks
  • Integrates security practices into the DevOps process and pipeline automation
  • Strives to automate core security tasks key takeaways

The opportunity exists to get your entire team and organization on the same page. Collaboration without education and training will not allow us to optimize at the level needed. We no longer have years and months to get the traction required. A DevSecOps, security as code, mindset is required now.

Shared practices are encouraged so I know that I will come to class ready to participate in lively discussions about, benefits, challenges, and how to move people, processes, and technology for optimized DevSecOps.



Labels:

Comments

Post a Comment

Popular posts from this blog

Four Service Characteristics

By
Recently I came across several articles by researchers and experts that laid out definitions and characteristics of services. ITIL provides us with a definition that can help drive the creation of value-laden services: A means of delivering value to customers by facilitating outcomes customers want to achieve without the ownership of specific costs and risks. An area that ITIL is not so clear is in terms of service characteristics. Several researchers and experts put forth that services have four basic characteristics (IHIP): Intangibility—Services are the results of actions not things. They have no physical presence and represent a logical set of elements. One way to think of service is “work done for others.”  Heterogeneity—Also known as “variability”; services are unique items because of the mechanisms used to deliver services, which is people. Because the people element adds variability, the service is variable. This holds true, especially for the value proposition—not eve...
Post a Comment
Read more

What is the difference between Process Owner, Process Manager and Process Practitioner?

By
This article was originally published in 2015. With the Introduction of ITIL 4, some of the concepts have changed in ways that are described below. ITIL 4 has also introduced new roles, as explained in our blog ITIL 4 and the Evolving Role of Roles . Before we dive into the difference between these roles, let’s first look at a key update in ITIL 4 – the shift from processes to practices. ITIL 4 has evolved to focus on holistic practices vs. isolated processes. By definition, a practice is a set of organizational resources designed for performing work or accomplishing an objective. For example, the purpose of the incident management practice is to minimize the negative impact of incidents by restoring normal service operation as quickly as possible. All organizations recognize the need to allocate resources to the management of incidents and mature their capabilities in that area. In ITIL 4, each practice includes resources based on the four ...
1 comment
Read more

What Is A Service Offering?

By
The ITIL 4 Best Practice Guidance defines a “Service Offering” as a description of one or more services designed to address the needs of a target customer or group.   As a service provider, we can’t stop there!   We must know what the contracts of our service offering are and be able to put them into context as required by the customer.     Let’s explore the three elements that comprise a Service Offering. A “Service Offering” may include:     Goods, Access to Resources, and Service Actions 1. Goods – When we think of “Goods” within a service offering these are the items where ownership is transferred to the consumer and the consumer takes responsibility for the future use of these goods.   Example of goods that are being provided in the offering – If this is a hotel service then toiletries or chocolates are yours to take with you.   You the consumer own these and they are yours to take with you.      ...
Post a Comment
Read more