8 docs tagged with "devsecops"

High-maturity practices for the protection of pipelines, with a focus on governance, simulated attack and Zero Trust

Practical example of applying security testing practices to an application classified as L3, with full pipeline integration and findings management.

Objective verification checklist of the adoption of security practices in CI/CD pipelines

How to apply secure CI/CD practices throughout the application lifecycle, with proportionality by risk, normalised user stories and auditable evidence

Organisational policies required to guarantee the security, traceability and governance of containers and images throughout the lifecycle.

Organisational policies needed to frame and reinforce governance and security in the use of Infrastructure as Code (IaC)

Security practices for continuous integration and delivery pipelines, with a focus on automation, traceability and control proportional to risk

Requirements and practical validations to ensure the existence, integrity and impact of threat modelling in the CI/CD lifecycle