Secure Code & Automation (DevSecOps)
Community Posts
What sorts of issues/challenges would you anticipate if you were to take a ‘secure by design’ approach to GenAI tools? What are the most important differences in the context of AI compared to other software?
Do you have dedicated teams for both DevOps and DevSecOps?
Yes27%
Only DevOps48%
Only DevSecOps11%
We don't have a dedicated team for either DevOps or DevSecOps12%
Other (please share in the comments)
How do you encourage your software staff to follow security best practices? Have you ever had problems with developers who aren’t following formal security processes after they’re in place?
How does your org securely integrate acquired code after M&A? Do you have a set process, or does it vary based on the company being acquired?
I'm looking for a tool to manage application security requirements for our organization. The requirements need to include both regulatory requirements (healthcare) and threat-based requirements through a lightweight threat modeling component. So far, SD Elements looks like a lone winner in this market segment. Does anyone have experience with them or one of their competitors? SD Elements is intriguing as it would also help us track compliance to the requirements thereby helping to measure progress and outcomes.
What can you do to safeguard proprietary secrets ahead of layoffs? Are code freezes enough?
Easier data management9%
More controlled access to company systems48%
Better UX for remote employees19%
Streamlined threat detection and mitigation15%
I’m not interested in SSE8%
Other (comment below)
Yes, always32%
Sometimes58%
No9%
Unsure1%