Get ready to level up your knowledge on DevOps and DevSecOps!
We’ve got an exclusive recording with the brilliant Matt Tesauro, where he takes us on an epic journey through the essential processes that will revolutionize your approach to software development and security.
You can read the complete transcript of the epiosde here >
Learnings from the podcast
- Context is key. When looking at vulnerabilities, do not just look at CVSS base score, instead, understand your risk profile and add the environmental elements for better prioritization.
- In order to adhere to DevSecOps practices, be pragmatic. Instead of a big bang approach, start small and iterate to incorporate security into existing DevOps practices.
- When it comes to prioritization of findings from SAST or SCA or vulnerability management or security tools in general, let the security team jump in and add context to help with information overload and prioritization.
