CyberSecurity Virtual Workshop for Public Sector

Rapid iterations of DevOps, along with a host of new tools, can make an application security program seem like a square peg in a round hole as enterprises try to push Sec into the middle of DevOps. At the same time, modern applications rely on a more dynamic environment that can introduce new CyberSecurity challenges, particularly as they scale.

In this session, we will provide hands-on examples with you in the driver’s seat and explore:

• Details of exactly how to shift left, from both the developer’s perspective and the security team’s perspective, with workflows for each.
• Understand how vulnerabilities are found by the developer within their CI pipeline and actions to take
• See how early visibility can reduce your risk and eliminate effort to help you scale your app sec program.
• Automate and monitor your security policies.
• Security challenges of next gen software and steps you can take now.

Agenda

9:00am: Introduction and welcome remarks
9:05am: Setting up the Lab projects, running a SAST Scan, creating an artifacts
9:35am: Review artifact results, adding container scanning, reviewing vulnerabilities in MR, run full scan project
10:35am: Running all the scanners in a project and reviewing vulnerabilities
11:10am: Manage and review vulnerabilities from the Group level for multiple projects
11:40am: Q&A and Closing