DevSecOps
DevSecOps — development, security and operations — integrates security into every phase of software development. In government, DevSecOps veers away from the traditional waterfall approach of software development in favor of integrating security practices throughout the software development lifecycle, from initial design to deployment and maintenance. This approach aims to build secure and resilient systems from the start, rather than bolting security on as an afterthought. For government agencies, this means protecting sensitive data, ensuring mission continuity and complying with stringent regulations. By embracing DevSecOps principles, government organizations can improve their cybersecurity posture, reduce risks and better serve citizens.
-
Executing the RMF as an Engineering Discipline, Not a Paperwork Exercise
The Risk Management Framework aligns security with system design and operational telemetry to enable continuous, real-time authorization.
6m read -
Opinion: The Case for Security-Embedded Architecture with cATO
cATO is transforming federal cybersecurity by embedding security into system design from the start, enabling faster, more secure innovation across agencies.
10m read -
New SHARE IT Act Mandates Federal Code Sharing to Cut Software Costs
Agencies are under pressure to make code public, with CMS leading efforts to drive open-source collaboration and governmentwide savings.
5m read -
VA’s Platform One Offers Sandbox to Software Developers
Platform One’s sandbox environment allows developers to create applications in protected conditions, keeping veteran data safe and secure.
14m watch -
Modernizing IT Systems for AI Adoption
USPS, NIH and Lumen discuss how modernization, data strategies and security are shaping AI’s future role in government.
32m watch -
DOD Advances DevSecOps, ATO Reform to Speed Mission-Ready Software
Defense leaders adopt DevSecOps and automation to speed software delivery, streamline ATO and boost cyber agility.
3m read -
DOD Expands DevSecOps to Accelerate Software Deployment
George Lamb said the Pentagon is using continuous authorization and better processes to integrate security and speed across all programs.
5m read -
Navy Expands Black Pearl Capabilities to Drive Operational Resilience
The Department of the Navy's Black Pearl software factory and Innovation Adoption Kit boost software development and operational resilience.
5m read -
DOD Accelerates Software Modernization with Agile DevSecOps Push
The Pentagon's software implementation plan tackles cultural hurdles and integrates security early to deliver critical capabilities faster.
6m read -
Marine Corps Operation StormBreaker Slashes Software Delivery Timelines by 17x
New program aims to deliver critical digital capabilities to warfighters at the "speed of relevance" by overhauling traditional processes.
4m read -
Software Factories Accelerate Federal Modernization Outcomes
IT leaders from Nutanix and SAIC explain how software factories streamline tech development, modernize legacy systems and accelerate adoption of emerging technologies like AI.
34m watch -
AWS Summit: Innovation Accelerates IT Delivery at DOD
Marine Corps Community Services is tackling outdated IT processes with agile development and cutting-edge cloud security to deliver mission-critical capabilities faster.
12m watch