Introduction

What?

DevOps can mean many different things, depending on which part of information technology (IT) it is being applied to. Here focus is on cloud services and the development and operations of web applications.

Why?

To be able to support the desperate better.

How?

• The story sofar

• Challenges

• SSDLC methodologies

• Implementing SSDLC

• Risk assessment

• Privacy Impact Assessment (PIA)

• Threat modelling

• Secure coding

• Security assessments

• Security automation

• Shared responsibility

• Securing virtual machines

• Securing managed database services

• Securing containers

• Securing serverless/function as a service

• Securing object storage

• Securing block storage

• Securing file storage

• Securing the container storage interface

• Securing virtual networking

• Securing DNS services

• Securing CDN services

• Securing VPN services

• Securing DDoS protection services

• Securing WAF services

• Identity management

• Monitoring and auditing