Realizing DevSecOps

These days, we see impressive terms like Artificial Intelligence (AI), Agile, SCRUM, DevOps, Internet of Things (IoT), Quantum computer, and others everywhere – in conversations and written materials. These are all terms that significantly impact society, directly or indirectly.

We all use technology in devices ranging from smartphones to self-driving cars. And all this technology shares one thing in common – it is managed by software! Every day, we see headlines about hackers, cybercrime, and DDoS, to say nothing of the many cases involving abuse, failure, theft, loss, or leaks of important information (including personal details). So, whether during development or throughout its service life, secure software is definitely not a luxury.

In response to the rapid and widespread adoption of DevOps and Agile, ISACA and Antwerp Management School are developing methods and controls for secure development. This book introduces the DevOps Secure Software Development Framework, together with a method for promoting the maturing of The DevOps Secure Software Development Lifecycle. The trends and fundamentals, along with details of DevOps secure software development, are explained in a series of short ‘Epics’. In these epics, we outline a practical method for building and managing DevOps secure software.

ISACA Netherlands Chapter is a nonprofit organization committed to promoting software security. This book marks an important step toward that goal.