Jan 27, 2020 - Cindy Blake    

Securing next generation software

Scale your security efforts by understanding and integrating with the DevOps workflow.

Next generation software has changed the way developers work, allowing them to produce code quickly and at scale. This poses new security challenges however and all too often security is treated as a bolt-on task at the end of the process. Approaching security in this manner won’t scale to the size and velocity of software development. It’s therefore critical that security innovation finds its way into your development lifecycle. You can be sure that your cyber-adversaries aren’t using hacking methods from 10 years ago – so why should you be using security technologies and methods from 10 years ago?

To tackle these changes, CISOs will need to understand three critical shifts in next-generation software:

  1. How software is composed and executed
  2. How software is delivered and managed
  3. How software complies with regulatory requirements

It’s time to think of security as an outcome from an integrated DevSecOps effort.

In my recent book (free to download here) I explain these three shifts in depth to help security professionals understand new application-related attack surfaces and areas of risk, how DevOps processes and tools affect their security efforts, and how security teams can adapt and scale to unite the iterative development and security workflows.

10 Steps to secure next-gen software Learn how DevOps will impact your security program.

Secure software in the age of DevOps

Securing the software development lifecycle has never been easy, and efficiency-boosting development changes have created more challenges for security teams to face. To be successful, CISOs and their teams need to be able to focus on:

  • Basic security hygiene
  • Monitoring, detection, and automated response
  • Building on standardization, policy automation, validation, common controls, and continuous improvement

Think it through

At the end of my book, you’ll find 10 steps to take as you work toward your next generation security program. Here is a quick preview of a few of the steps:

  1. Start by assessing where you are, and decide on a path to move forward.
  2. Align metrics to manage risks, not silos.
  3. Go broad, not deep, when testing software.
  4. Apply continuous security scanning to iterative development.
  5. Apply Zero Trust principles to your applications and their infrastructure.

Cover image by theverticalstory on Unsplash

10 Steps Every CISO Should Take to Secure Next-Gen Software Understand three software shifts impacting security, and the steps CISOs can take to protect their business. Get the eBook Arrow

Try all GitLab features - free for 30 days

GitLab is more than just source code management or CI/CD. It is a full software development lifecycle & DevOps tool in a single application.

Try GitLab Free
Git is a trademark of Software Freedom Conservancy and our use of 'GitLab' is under license

Try GitLab risk-free for 30 days.

No credit card required. Have questions? Contact us.

Gitlab x icon svg