Mini$-$Project $41$: New DevSecOps Group

Mini$-$Project Overview

Time Estimate: $2$ hours

Security Boulevard gives a nice overview of the new idea of DevSecOps below. Please read before proceeding to the Project Submission Steps:

As you learned from the videos, DevSecOps stands for Development, Security, and Operations. Similar to DevOps or SecOps, it is a concept that joins two previously separate roles into a unified environment. DevSecOps teams are responsible for providing conditions for continuous secure application development.

Being a newer concept than DevOps, DevSecOps was coined to emphasize the importance of IT security processes and security automation in the software development lifecycle. While the idea of merging development teams and IT operations teams is not that new, until some time ago security was often treated as a side$-$task. However, the increasing cybersecurity concerns made it necessary to clarify that security controls are a key aspect of continuous delivery and that everyone should be responsible for it$,$ not only dedicated security teams.

Project Submission Steps Based on some serious web vulnerabilities you discovered, you recognize that the organization could benefit from a DevSecOps group. You mention this to your boss, who concurs. He tells you that he will fully support the idea, but they will need to get senior management buy$-$in first. Your task is to create a presentation using Google Slides $(10-12$ slides$)$ in which you must pitch the idea of creating a DevSecOps team. The presentation must include the following: $$ Definition of DevSecOps. Remember, these executives are not IT$-$savvy so you will need to explain everything in layman$$s terms. $$ The benefits organization of this new team. Try to focus on lowering costs, increasing revenue, or both. $$ Howbigtheteamneedstobe,and why. $$ Whowillbeontheteam?If you need to hire people, what skillsets and experience would you look for? $$ Cost estimate. This must include tools, workspace, and ballpark compensation of team members. $$ Will interact with $($IT audit, IT security, Software Development, etc.$)$