SANS 2022 DevSecOps Survey: Creating a Culture to Significantly Improve Your Organization’s Security Posture

Speakers: SANS Institute Analysts Chris Edmundson and Kenneth G. Hartman; Deepfactor CEO Kiran Kamity

Learn about the 5 key DevSecOps takeaways from the survey:

1. Picking the right DevSecOps KPIs

2. The ROI and time savings of DevSecOps

3. DevSecOps key to success

4. Automated compliance checking and enforcement

5. Most useful testing practices and tools

With SANS Institute analysts Chris Edmundson and Kenneth G. Hartman

The pressure is on! As if there wasn’t enough momentum pushing security and development teams to get applications to the cloud, along came 24 months of remote work, high workforce turnover, and budget reductions.

Never has there been more reason or pressure on security and development teams to get mission-critical workloads to the cloud than there is in 2022. Powerful, enabling technologies such as Function-as-a-Service, containers, and Kubernetes are becoming commonplace in many cloud operations—but what’s working, what’s not, who’s doing it right, who’s getting it wrong, and why?

Well, don’t worry, SANS has got your back. The 2022 DevSecOps Survey examines every aspect of the challenge, and opportunity, in front of us as we look to embrace the cloud and bring to bear the architectural and functional DevSecOps capabilities that will deliver on the cost-efficient and high-performance promises of mission-critical applications in the cloud.

Against that backdrop, the speakers explore:

• The necessary architecture and systems development skills that security professionals must enhance to lead and influence secure development—especially with the increasing reliance on CI/CD and Infrastructure as Code (IaC).

• The extent to which organizations are integrating cloud native security solutions (cloud workload protection platforms, cloud security posture management, Secure Access Service Edge, etc.) in their cloud environments.

• The adoption of security technologies to secure both the code and the CI/CD toolchain. This includes (IaC), security testing tools, and vulnerability management.

• The use of DevOps tools and techniques for automating traditional security operations. For example: GRC, PKI, forensics, and incident response.

• What does a healthy SOC budget look like?

Don’t miss what promises to be our most interactive and informative DevOps Survey and live event ever. Register now and receive the associated survey and best practices guide written by SANS Senior Instructors’ Ken Hartman and Chris Edmundson, with insights from Deepfactor Founder & CEO Kiran Kamity.