DevSecOps
DevSecOps — development, security and operations — integrates security into every phase of software development. In government, DevSecOps veers away from the traditional waterfall approach of software development in favor of integrating security practices throughout the software development lifecycle, from initial design to deployment and maintenance. This approach aims to build secure and resilient systems from the start, rather than bolting security on as an afterthought. For government agencies, this means protecting sensitive data, ensuring mission continuity and complying with stringent regulations. By embracing DevSecOps principles, government organizations can improve their cybersecurity posture, reduce risks and better serve citizens.
-
Army Targets New DevSecOps Initiative to Speed Code Reviews
Gabe Chiulli said ‘Project Gatekeeper’ will use AI-assisted code evaluation and faster deployment authorizations.
8m watch -
Agencies Push to Rethink ATOs as Continuous Risk Management
Ensuring security features like continuous monitoring and risk assessment is central to streamlining the authority to operate process.
-
Agencies Shift Security, Compliance Left to Deliver Software Faster
Officials are shifting compliance and AI governance earlier in the development to match commercial software speed and maintain security.
2m read -
Army Targets 2028-2029 for Digital Engineering Ecosystem
Army's Rosie Bauer said a fully connected digital ecosystem will link acquisition, requirements and logistics into a continuous thread.
2m read -
Federal Developers Treat AI Like a Junior Engineer
Federal technology leaders say AI coding assistants should be treated like junior engineers within DevSecOps pipelines.
4m read -
Federal Experts Urge Rigorous Testing Before Deploying AI Tools
The use of AI in government organizations requires security experts to revise how these tools are evaluated and tested before deployment.
-
Army is Launching AI-Powered, Commercial-Facing DevSecOps Platform
Army Acting CIO Gabe Chiulli teased Gatekeeper to automate intake, streamline requests and accelerate delivery of commercial tools.
3m read -
Misunderstood ATOs Are Costing Agencies Time, Money
Institutional confusion about ATOs is creating avoidable delays, while modern DevSecOps approaches offer a faster path to software delivery.
9m watch -
How AI is Delivering Real Mission Results Across Government
Workforce training and software development are some areas where agencies are using AI to save time, modernize systems and improve services.
3m read -
The Rise of Platform Engineering in Government
How DevSecOps, platform engineering and AI are accelerating secure software delivery across government.
20m read -
Agencies Shift From Fragmented IT Systems to Unified Platforms
Federal technology leaders discussed consolidating legacy tools, streamlining compliance and scaling AI to improve government efficiency.
3m read -
Platform Engineering Pushes Government to 'Production as a Service'
Marine Corps’ Operation Stormbreaker reduces developer burden, automates RMF controls and accelerates secure code delivery into production.
4m read
