Scribd Logo
Upload

Welcome to Scribd!

  • 12 views

    Devsecops

    Uploaded by

    abhi_?1988

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd

    Devsecops

    Uploaded by

    abhi_?1988
    12 views2 pages

    Original Title

    77

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    12 views2 pages

    Devsecops

    Uploaded by

    abhi_?1988

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    of 2

    1

    CASE STUDY:
    DevSecOps

    Why DevSecOps

    Exec. Summary: Need of DevSecOps

    Every Organization is aware of the benefits derived from DevOps framework as part of the Agile
    methodology in Software Delivery lifecycle. DevOps delivers better cross functional collaboration, faster
    Time to Market, increased productivity with Automation, enhances end user experience, increase in
    company’s bottom-line etc.

    But within the Organization, perception about Information Security team is that they “inhibit change”.
    The attack surface has moved to application and in recent times Web application security breaches has
    increased many folds.

    While Organization is investing heavily in Information Security tools but in wrong things and hurting
    productivity due to misalignment in practices and policies involving Information Security,
    Development and Operations team.

    There is a tremendous shift in the technology stack used as part of Development. Containerization and
    Micro Services has become mainstream. Adaption of Open source solutions has tremendous
    momentum.

    Organizations are integrating Security with business outcomes. This is done as part of DevSecOps
    which is joining Security with DevOps.

    DevSecOps enables transformation of Information Security in following areas

    • Involvement during early stage of Development cycle rather than usual practice of inspection
    at the end of development cycle.
    • Reduction in lag time for approvals or Security fixes via self-service workflows with automating
    Security tooling.
    • Collaborate with Development and Operations team rather than just “Handoffs”.
    • Enables setup of feedback loop resulting in Security team gaining insight into rapidly changing
    run time environment from Development to Production environment and respond to events
    before it becomes a threat.

    Giniminds has solution addressing following business challenges around DevSecOps

    • Integrate and automate identification of security vulnerabilities in Containers and Open source
    solution during development phase itself.
    • Open source license compliance.
    • Seamless integration with overall DevOps process.

    www.giniminds.com
    2

    CASE STUDY:
    DevSecOps

    Key Facts

    WHO: Leading Global System Integrator

    CHALLENGES: Joining Security as part of DevOps

    SOLUTION: Giniminds has solution addressing following business challenges around DevSecOps

    BENEFITS:

    1) Integrate and automate identification of security vulnerabilities in Containers and Open


    source solution during development phase itself.
    2) Open source license compliance.
    3) Seamless integration with overall DevOps process.

    www.giniminds.com

    You might also like