Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
The Case for MarDevSecOps
Newest First  |  Oldest First  |  Threaded View
Page 1 / 2   >   >>
viopoker
50%
50%
viopoker,
User Rank: Apprentice
11/5/2018 | 8:48:32 AM
I just now
I just now evolving DevOps into DevSecOps

 

 
Joe Stanganelli
50%
50%
Joe Stanganelli,
User Rank: Ninja
10/31/2018 | 10:45:35 PM
Re: Where the problem is.
@Dr.T: Conversely, however, in many organizations, marketing's hands would effectively be tied if they had to run everything through IT (especially in those orgs where the marketing department frequently faces uphill battles to justify itself to operations people who don't understand what marketing does, what good marketing looks like, or why marketing is important). You can really only deal with this with partnership between IT and marketing, from the top down. But that takes a huge effort that many orgs simply don't feel that they can afford.
Joe Stanganelli
50%
50%
Joe Stanganelli,
User Rank: Ninja
10/31/2018 | 10:43:20 PM
Re: God, please, no; stop this bullshit.
I agree, @Jim. Vendors are great for outsourcing certain things, but the one thing you should never outsource (or, at least, almost never) is strategy. Strategy has to come from within, and that requires the kind of holistic approach you're talking about -- buzzword combos aside.
Joe Stanganelli
50%
50%
Joe Stanganelli,
User Rank: Ninja
10/31/2018 | 10:41:44 PM
Sec vs. Privacy vs. Compliance
The only problem with all of this philosophizing is that security, privacy, and compliance -- while comprising the greater Venn diagram of data stewardship -- remain separate (if partially overlapping) circles. Security is not privacy. Privacy is not compliance. Compliance is not security. It's really going to take much more interaction to get marketing on board with these regulations -- as well as to be proactive enough with privacy, security, and best practices such that future regulation and law don't cause too big of a speed bump. Ditto for dev teams (who are just as guilty of making bad decisions with data).
Dr.T
50%
50%
Dr.T,
User Rank: Ninja
10/31/2018 | 12:49:12 PM
Where the problem is.
If DevSecOps stakeholders don't include marketing or worse, let marketing continue to think it is safe to take IT procurement in its own hands Obviously this is where the problem is. IT can easily be by-passed.
Dr.T
50%
50%
Dr.T,
User Rank: Ninja
10/31/2018 | 12:46:19 PM
User need
If marketing were brought into the process, it could help developers intimately understand the end user's needs I agree with this statement. We tend to develop things that nobody needs.
Dr.T
50%
50%
Dr.T,
User Rank: Ninja
10/31/2018 | 9:30:13 AM
Re: God, please, no; stop this bullshit.
intelligent group internally to talk about how that plays into centralized consent management, etc This makes sense. Marketing and other groups should be part of it in my view.
Dr.T
50%
50%
Dr.T,
User Rank: Ninja
10/31/2018 | 9:17:49 AM
Re: God, please, no; stop this bullshit.
The more things you do, the less solid results are. It is inevitable. Laws of physics. This is a fair point. However these days we are being asked more with less.
Dr.T
50%
50%
Dr.T,
User Rank: Ninja
10/31/2018 | 9:12:05 AM
MarDevSecOps
I like the concept of MarDevSecOps. Marketing should be streamlined into security operations for sure.
jim.kaskade
50%
50%
jim.kaskade,
User Rank: Author
10/30/2018 | 5:40:11 PM
Re: God, please, no; stop this bullshit.
Fair enough. I wasn't advocating for a new group (like MarDevSecFinJanitorChefOps). I was saying that before my CMO pulls in yet another marketing tool (lets look at Scott Brinker's ChiefMarTech list), one might sit down with an intelligent group internally to talk about how that plays into centralized consent management, etc.).

It's more about bringing the fragmented players together when it comes to consumer data.
Page 1 / 2   >   >>


Mobile Banking Malware Up 50% in First Half of 2019
Kelly Sheridan, Staff Editor, Dark Reading,  1/17/2020
Exploits Released for As-Yet Unpatched Critical Citrix Flaw
Jai Vijayan, Contributing Writer,  1/13/2020
Microsoft to Officially End Support for Windows 7, Server 2008
Kelly Sheridan, Staff Editor, Dark Reading,  1/13/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: This comment is waiting for review by our moderators.
Current Issue
The Year in Security: 2019
This Tech Digest provides a wrap up and overview of the year's top cybersecurity news stories. It was a year of new twists on old threats, with fears of another WannaCry-type worm and of a possible botnet army of Wi-Fi routers. But 2019 also underscored the risk of firmware and trusted security tools harboring dangerous holes that cybercriminals and nation-state hackers could readily abuse. Read more.
Flash Poll
[Just Released] How Enterprises are Attacking the Cybersecurity Problem
[Just Released] How Enterprises are Attacking the Cybersecurity Problem
Organizations have invested in a sweeping array of security technologies to address challenges associated with the growing number of cybersecurity attacks. However, the complexity involved in managing these technologies is emerging as a major problem. Read this report to find out what your peers biggest security challenges are and the technologies they are using to address them.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-7227
PUBLISHED: 2020-01-18
Westermo MRD-315 1.7.3 and 1.7.4 devices have an information disclosure vulnerability that allows an authenticated remote attacker to retrieve the source code of different functions of the web application via requests that lack certain mandatory parameters. This affects ifaces-diag.asp, system.asp, ...
CVE-2019-15625
PUBLISHED: 2020-01-18
A memory usage vulnerability exists in Trend Micro Password Manager 3.8 that could allow an attacker with access and permissions to the victim's memory processes to extract sensitive information.
CVE-2019-19696
PUBLISHED: 2020-01-18
A RootCA vulnerability found in Trend Micro Password Manager for Windows and macOS exists where the localhost.key of RootCA.crt might be improperly accessed by an unauthorized party and could be used to create malicious self-signed SSL certificates, allowing an attacker to misdirect a user to phishi...
CVE-2019-19697
PUBLISHED: 2020-01-18
An arbitrary code execution vulnerability exists in the Trend Micro Security 2019 (v15) consumer family of products which could allow an attacker to gain elevated privileges and tamper with protected services by disabling or otherwise preventing them to start. An attacker must already have administr...
CVE-2019-20357
PUBLISHED: 2020-01-18
A Persistent Arbitrary Code Execution vulnerability exists in the Trend Micro Security 2020 (v160 and 2019 (v15) consumer familiy of products which could potentially allow an attacker the ability to create a malicious program to escalate privileges and attain persistence on a vulnerable system.