Any advice for leaders who are looking to adopt DevSecOps but getting resistance from the org or dev teams? How can you overcome that pushback?

Security & GRC Secure Code & Automation (DevSecOps)Security Strategy & Roadmap+1 more

5.8k views8 Comments

Sort By:

Oldest

Chief Technology Officer and Chief Information Officer8 months ago

Share the horror stories about leaked data and lost business and reputation, how much it may cost. Present risks to the management. The leaders then should make this cause shared by their subordinates, dev and org teams. This is basically what their job role is.

Chief Technology Officer in Software8 months ago

Prepare a 2 pager for pros and cons. Show results with migration of one project.

CISO in Insurance (except health)8 months ago

The lessons that I have learned over the years are:
1. The security team must have development skill and practical experience to speak the same language as the development team and to establish trust.
2. Developers must lead the initiative showing buy in to the rest of the development teams.
3. The development manager must believe in and support the project.

1 1 Reply

Please join or sign in to view more content.

By joining the Peer Community, you'll get:

Peer Discussions and Polls
One-Minute Insights
Connect with like-minded individuals

Head of Corporate Development in Software8 months ago

I will echo your lessons. Having lead product development and IT teams, if you want prod dev to be involved, you have to get them on board at all levels of the organization. Part of doing that is a preexisting respect of the security team, which means that teams needs to be developers in their own right and speak the same language.

CIO8 months ago

It's all about getting a clear DevSecOps strategy defined and agreed upon with all the key stakeholders. The problem comes when the vision is not understood, and/or when the R&R is not well defined. I wrote a detailed LinkedIn article at the back of a strategic DevOps transformation that I led at my previous organization. Sharing the link here if it can be of any help: https://www.linkedin.com/pulse/devops-vision-strategy-sample-blueprint-large-sumeet-goenka/

Principle Consultant in IT Services7 months ago

Work with the development leadership on developing a secure software development lifecycle policy. Work on the approach of crawl, walk, run.

Content you might like

What’s on your IAM roadmap for the next 18-24 months?

Identity & Access Management (IAM)Threat & Vulnerability Management Security Strategy & Roadmap

Director of IT in IT Services4 days ago

Implementation of Zero trust architecture, its modules across the organisation is a priority for us. So, we will be implementing zero trust strategies in IAM, inline with overall strategy.

1.4k views1 Comment