The DevSecOps Playbook

A must-read guide to a new and rapidly growing field in cybersecurity

In The DevSecOps Playbook: Deliver Continuous Security at Speed, Wiley CISO and CIO Sean D. Mack delivers an expert analysis of how to keep your business secure, relying on the classic triad of people, process, and technology to examine—in depth—every component of DevSecOps. In the book, you'll learn why DevSecOps is as much about people and collaboration as it is about technology and how it impacts every part of our cybersecurity systems.

You'll explore the shared responsibility model at the core of DevSecOps, as well as the people, processes, and technology at the heart of the framework. You'll also find:

• An insightful overview of DevOps and DevSecOps principles and practices
• Strategies for shifting security considerations to the front-end of the development cycle
• Ways that the standard security model has evolved over the years and how it has impacted our approach to cybersecurity

A need-to-read resource for security leaders, security engineers, and privacy practitioners across all industries, The DevSecOps Playbook will also benefit governance, risk, and compliance specialists who seek to better understand how a transformed approach to cybersecurity can impact their business for the better.

Foreword xiii

Introduction xv

Chapter 1 Introducing DevSecOps 1

Chapter 2 The Evolution of Cybersecurity (from Perimeter to Zero Trust) 23

Chapter 3 DevSecOps People 47

Chapter 4 DevSecOps Process 77

Chapter 5 DevSecOps Technology 99

Chapter 6 DevSecOps Governance 125

Chapter 7 Driving Transformation in Enterprise Environments 147

Chapter 8 Measuring DevSecOps 169

Chapter 9 Conclusion 195

Acknowledgments 207

About the Author 209

Index 211

SEAN D. MACK, MBA, CISO, is the Chief Information Officer at Wiley, an education and research company. He has extensive experience leading DevOps, infrastructure, enterprise applications, security, ad desktop services in the educational technology and publishing industry.

An essential and up-to-date guide to DevSecOps

In The DevSecOps Playbook: Deliver Continuous Security at Speed, the Chief Information and Information Security Officer at Wiley, Sean D. Mack, delivers an insightful and practical discussion of how to keep your business secure. You’ll learn how to leverage the classic triad of people, process, and technology to build strong cybersecurity infrastructure and practices. You’ll also discover the shared responsibility model at the core of DevSecOps as you explore the principles and best practices that make up contemporary frameworks.

The book explains why it’s important to shift security considerations to the front-end of the development cycle and how to do that, as well as describing the evolution of the standard security model over the last few years and how that has impacted modern cybersecurity.

A must-read roadmap to DevSecOps for practicing security engineers, security leaders, and privacy practitioners, The DevSecOps Playbook will also benefit students of information technology and business, as well as governance, risk, and compliance specialists who want to improve their understanding of cybersecurity’s impact on their organizations.