Securing Mission Critical Apps

It’s clear DevSecOps is taking hold across the federal government.

But like any new process, agencies must guard against the wolf in sheep’s clothing challenge–meaning calling your process DevSecOps but really following the waterfall methodology where you define the end result, require all the documentation and funding upfront and deliver capabilities every six months or every year.

This means agencies need to train developers as well as the mission or program owners on the DevSecOps methodology to ensure they don’t fall back into old habits.

Executives from the State Department, U.S. Securities and Exchange Commission, U.S. Patent and Trademark Office and GitLab will discuss how institutionalizing this approach to software development is a journey that must bring together the technology and business sides to change an organization’s culture.

Learning objectives:

• Current state of DevSecOps
• The application rationalization journey
• ATO challenges and recomendations