U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Workshop

Virtual Workshop on Improving the Security of DevOps Practices

Workshop Recording

The recording from this event is now available.

Post Workshop Materials

NIST Introduction and Workshop Overview
Kevin Stine – NIST
Why Frameworks Matter for Modern Software Developers: Rooting DevSecOps Practice in Security Frameworks
Aaron Cooper – BSA
6 Pillars of DevSecOps
John Martin – SAFECode
DevSecOps Pipeline for Complex Software-Intensive Systems: Addressing Cybersecurity Challenges
Carol Woody – SEI
92 years to DevOps: A Motorola Solutions Case Study
Adam Lewis – Motorola Solutions
Lessons Learned and Open Problems Delivering Companywide DevSecOps Solutions at Microsoft
Michael Fanning – Microsoft
How Leaders Set the Stage – Successfully Scaling DevSecOps
Tim Anderson – AWS
Shift-Left Compliance & Security
Jim Doran – IBM
Securing and Protecting DevSecOps with Cloud-Enabled Technologies
Lisa Lorenzin – Zscaler
Full Stack DevSecOps
John Morello - Palo Alto Networks
Using Balanced Development Automation to Address Security in a DevOps Environment
Ehsan Foroughi - Security Compass
Journey to DevSecOps
James Barr – TechTrend
Enhancing DevSecOps Capabilities with Observability and Automation
Michael Polisky – Splunk

Related Materials

Read about NIST's plans to advance current and emerging secure software development and operations practices.