Understanding DevSecOps
As we discussed in the introduction, DevSecOps is an approach to software development and IT operations that emphasizes integrating security practices into every stage of the software development life cycle. The term “DevSecOps” is derived from three key components: Development (Dev), Security (Sec), and Operations (Ops). It represents a cultural and procedural shift in the world of technology that seeks to make security a shared responsibility and a fundamental part of the software delivery process:
Figure 17.1 – DevSecOps (https://images.idgesg.net/images/article/2018/01/devsecops-gartner-image-100745815-orig.jpg)
Let’s take a look at the key elements and principles of DevSecOps:
- Security as a culture: DevSecOps promotes a culture where security is not just the responsibility of a dedicated security team but is embraced by everyone involved in the software development and deployment process. It encourages a shared...
