Applications Enterprise Policies SDLC 
CIO Business Intelligence
OCTOBER 31, 2023
As the vice president of enterprise architecture and technology strategy at Discover Financial Services, I think about this question often as we work to design our tech stack. As a practice, DevSecOps is a way to engrain practices in your SDLC that ensures security becomes a shared responsibility throughout the IT lifecycle.
SecureWorld News
MAY 19, 2022
The wide adoption of cloud-native applications and infrastructure has propelled DevOps and a self-service culture enabling developers to go from code to cloud in hours. Security teams are entirely unprepared to govern and secure the modern SDLC in this agile world. That need is at the root of security guardrails for AppSec.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
SecureWorld News
JULY 7, 2020
Recently, Chef commissioned a survey of security professionals in order to provide greater insight into what security leaders are most concerned with and how collaboration with I&O (Infrastructure & Operations) is needed within enterprise-sized organizations. How important is DevSecOps in the SDLC?
SecureWorld News
AUGUST 7, 2023
Why should AI get a pass on S (Secure) SDLC methodologies? Despite the active contributions of SDLC methodologies over the past 20 years—such as Waterfall, Agile, V-shaped, Spiral, Big Bang, and others—there remains a lack of security-by-design for integration into AI developments such as ChatGPT, DALL-E, and Google's Bard.
Future of CIO
OCTOBER 26, 2013
But what’re the correlations of Enterprise Governance, EA Governance and IT Governance, and how to achieve high performing business results based on high mature governance? Enterprise Architecture Governance ( EAG ) is a discipline that teaches how an Enterprise ensures or enforces its accepted Enterprise Architecture.
CIO Business Intelligence
NOVEMBER 2, 2023
The principle of least privilege (PoLP) is an information security concept that maintains that a user or entity should only have access to the specific data, resources, and applications needed to complete a required task. But this opened the applications for attacks that could easily subvert the entire OS. Within a ZTNA 2.0
Expert insights. Personalized for you.
141 
Let's personalize your content