Framework for Enterprise IT DevSecOps Governance to enable Continuous Security

In todays business context, companies need to release software quickly in order to remain competitive. This requires internal teams to work closely together from the outset. Unfortunately, security is typically considered only at the very end. This means if any issues are discovered by the security team, it requires extensive rework. Typical responses are to bypass security or to consider fixing the issues after releasing the software. Neither one is optimal for managing business risk. A better solution is to include security as part of the collaboration at the outset. This project will examine how such cross-team collaboration might work with the necessary assurance in place to manage business risk.

Faculty Supervisor:

Norman Archer

Student:

Eduardo Lopez

Partner:

Security Compass

Discipline:

Business

Sector:

Information and communications technologies

University:

Program: