Dark Reading is part of the Informa Tech Division of Informa PLC
This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.
New work arrangements and priorities mean new applications and services are being developed constantly – and most of them are cloud-based. It also introduces new security challenges given pushing apps to the cloud faster means security is often an afterthought. CISOs will need to invest more in DevSecOps tools and processes in 2021 to ensure security is part of the DevOps process from the start.
"Security teams and DevSecOps teams continue to shift further left in the SDLC or CI/CD into areas like security checks on infrastructure as code and security testing earlier in the development/build life cycle," Acoustic's Dotson says.
Getting security involved at the outset better ensures the proper controls are in place throughout the application development cycle.
"The more that security and compliance evaluation processes can be embedded in developer and DevOps processes, the more effective they will be," Dotson says.
Joan Goodchild is a veteran journalist, editor, and writer who has been covering security for more than a decade. She has written for several publications and previously served as editor-in-chief for CSO Online. View Full Bio
Recommended Reading:
Tweet This
