The DevSecOps Playbook: Deliver Continuous Security at Speed

by Sean D. Mack

The DevSecOps Playbook An essential and up-to-date guide to DevSecOps In The DevSecOps Deliver Continuous Security at Speed , the Chief Information and Information Security Officer at Wiley, Sean D. Mack, delivers an insightful and practical discussion of how to keep your business secure. You’ll learn how to leverage the classic triad of people, process, and technology to build strong cybersecurity infrastructure and practices. You’ll also discover the shared responsibility model at the core of DevSecOps as you explore the principles and best practices that make up contemporary frameworks. The book explains why it’s important to shift security considerations to the front-end of the development cycle and how to do that, as well as describing the evolution of the standard security model over the last few years and how that has impacted modern cybersecurity. A must-read roadmap to DevSecOps for practicing security engineers, security leaders, and privacy practitioners, The DevSecOps Playbook will also benefit students of information technology and business, as well as governance, risk, and compliance specialists who want to improve their understanding of cybersecurity’s impact on their organizations.

240 pages, Paperback

Published November 7, 2023

Reviews

[David · Rating 2 out of 5]

This book is maddening. It has all the latest in popular IT buzzwords, but no meat. It's full of sentences that start like, "it is important that...," or "it is critical to...," or "you must..." There's no data to back up any of it - statistics, surveys, case studies, polls, or metrics. Even the chapter on measurement doesn't have it. You could just as easily finish the sentences like, "it is critical that you feed your developers only apples on Wednesdays." How about, "it is important to automate your development pipelines with servers powered by bicyclists." If you just dare to question any of the sweeping declarations in the book, then I question them all. The few references are Gene Kim's fictional entertainment, which is good to make people think about and question their longstanding processes, but also not forthcoming on data to justify why you may want to do anything recommended in this book. It is shallow and not much good for anything more than providing you some topics that you might decide to research elsewhere.