DevSecOps
DevSecOps — development, security and operations — integrates security into every phase of software development. In government, DevSecOps veers away from the traditional waterfall approach of software development in favor of integrating security practices throughout the software development lifecycle, from initial design to deployment and maintenance. This approach aims to build secure and resilient systems from the start, rather than bolting security on as an afterthought. For government agencies, this means protecting sensitive data, ensuring mission continuity and complying with stringent regulations. By embracing DevSecOps principles, government organizations can improve their cybersecurity posture, reduce risks and better serve citizens.
-
Streamlining the ATO Process Makes Software Deployments More Efficient, Secure
NIST’s Victoria Yan Pillitteri discusses common ATO stumbling blocks and how agencies can streamline authorization for secure software deployment.
7m watch -
NIST Explores AI’s Role in DevSecOps
Michael Ogata discusses NIST’s latest DevSecOps research, the growing role of AI agents and the need for new approaches to identity and authorization.
4m watch -
Coast Guard Software Yard Accelerates Secure Application Development
Coast Guard’s infrastructure official shared how the effort strengthens application development and cybersecurity.
8m watch -
Air Force Software Official: AI Should Reuse Code, Not Rewrite It
CTO Kurt Jarvis explained how RAG, vector databases and DevSecOps guardrails help agencies safely integrate AI into coding.
7m watch -
Army Targets New DevSecOps Initiative to Speed Code Reviews
Gabe Chiulli said ‘Project Gatekeeper’ will use AI-assisted code evaluation and faster deployment authorizations.
8m watch -
Agencies Push to Rethink ATOs as Continuous Risk Management
Ensuring security features like continuous monitoring and risk assessment is central to streamlining the authority to operate process.
-
Agencies Shift Security, Compliance Left to Deliver Software Faster
Officials are shifting compliance and AI governance earlier in the development to match commercial software speed and maintain security.
2m read -
Army Targets 2028-2029 for Digital Engineering Ecosystem
Army's Rosie Bauer said a fully connected digital ecosystem will link acquisition, requirements and logistics into a continuous thread.
2m read -
Federal Developers Treat AI Like a Junior Engineer
Federal technology leaders say AI coding assistants should be treated like junior engineers within DevSecOps pipelines.
4m read -
Federal Experts Urge Rigorous Testing Before Deploying AI Tools
The use of AI in government organizations requires security experts to revise how these tools are evaluated and tested before deployment.
-
Army is Launching AI-Powered, Commercial-Facing DevSecOps Platform
Army Acting CIO Gabe Chiulli teased Gatekeeper to automate intake, streamline requests and accelerate delivery of commercial tools.
3m read -
Misunderstood ATOs Are Costing Agencies Time, Money
Institutional confusion about ATOs is creating avoidable delays, while modern DevSecOps approaches offer a faster path to software delivery.
9m watch
