Managing Developer Velocity and System Security with DevSecOps

In aiming for correctness and security of product, as well as for development speed, software development teams often face tension in their objectives. During a recent customer engagement that involved the development of a continuous-integration (CI) pipeline, developers wanted to develop features and deploy to production, deferring non-critical bugs as technical debt, whereas cyber engineers wanted compliant software by having the pipeline fail on any security requirement that was not met. In this podcast from the Carnegie Mellon University Software …

bugs continuous correctness critical customer customer engagement debt deploy developer developers developer velocity development devsecops engagement features integration non objectives pipeline product security software software development speed system teams technical technical debt tension