Implementing Security in the Plan Phase of DevOps
The plan phase of DevOps focuses on gathering requirements and feedback from key stakeholders and customers, producing an evolving product roadmap that prioritizes key requirements, and designing a flexible software architecture. Implementing DevSecOps for this phase should focus on security challenges that can be addressed before the developers start writing code! Activities in this phase should include implementing an agile threat modeling process to identify design-level security issues earlier and implementing security training for your teams.
In this chapter, we will cover what works when you’re looking to implement a continuous threat modeling process. We will also discuss the different maturity levels of a secure code-to-cloud training program. By the end of this chapter, you will have gained a solid understanding of the following key areas:
- The challenges of traditional threat modeling in DevSecOps
- How...
