The Five Attributes Needed to Succeed at DevSecOps

It’s hard to believe but the conversation around how security fits in DevOps has been going on for years. It was in 2012 when Gartner analyst Neil MacDonald wrote his blog DevOps Needs to Become DevOpsSec. In this blog MacDonald wrote “DevOps seeks to bridge the development and operations divide through the establishment of a culture of trust and shared interest among individuals in these previously siloed organizations. However, this vision is incomplete without the incorporation of information security, which represents yet another silo in IT.”

The post The Five Attributes Needed to Succeed at DevSecOps appeared first on Security Boulevard.

from The Five Attributes Needed to Succeed at DevSecOps

Five Security Books You Should Read if You Haven’t

-

The post Five Security Books You Should Read if You Haven’t appeared first on Security Boulevard.

from Five Security Books You Should Read if You Haven’t

US Commerce on Security and Market Incentives — Consumers don’t want security

In a report published by the U.S. Departments of Commerce and Homeland Security concluded what most security professionals have known for years: that botnets are a global threat, that technologies exist to mitigate the threats but aren’t widely used for multiple reasons, poor product security design and development, counter-productive market incentives, and low education and awareness across all market participants.

The post US Commerce on Security and Market Incentives — Consumers don’t want security appeared first on Security Boulevard.

from US Commerce on Security and Market Incentives — Consumers don’t want security

Six ways security teams sabotage their own plans

It’s not always the bad guys that sabotage enterprise security efforts, sometimes organizations do that all on their own.

The post Six ways security teams sabotage their own plans appeared first on Security Boulevard.

from Six ways security teams sabotage their own plans

Cloud computing and the amplified insider threat

When it comes to insider threats, the nature of the threats is largely the same regardless of the computing environment, such as whether the data and apps reside on-premises, public cloud, or provide cloud — the risk of data exfiltration, data destruction, theft, and similar is ever-present.

The post Cloud computing and the amplified insider threat appeared first on Security Boulevard.

from Cloud computing and the amplified insider threat

Survey finds hybrid cloud security growing pains

There’s no doubt that enterprises are embracing cloud computing, but not-so-surprising that enterprises repeatedly say that they need heightened visibility and security management capabilities so they can more effectively deploy applications, defend against cyberattacks, and mitigate regulatory compliance risks, a recent survey found.

The post Survey finds hybrid cloud security growing pains appeared first on Security Boulevard.

from Survey finds hybrid cloud security growing pains