Application Security

  1. Secure Software Development Lifecycle
    1. Traditional SDLC vs. Secure SDLC
      1. SDLC Phase Overview
        1. Security Integration Points
          1. Cost of Late Security Integration
            1. Security Gate Reviews
            2. Shift-Left Security Approach
              1. Early Security Involvement
                1. Proactive vs. Reactive Security
                  1. Developer Security Training
                    1. Security Requirements Definition
                    2. DevSecOps Integration
                      1. Cultural Transformation
                        1. Collaboration Models
                          1. Automation Strategies
                            1. Continuous Security
                            2. Agile Security Practices
                              1. Security in Sprint Planning
                                1. Security User Stories
                                  1. Definition of Done Security Criteria
                                    1. Sprint Security Reviews
                                    2. Security Roles and Responsibilities
                                      1. Security Champions
                                        1. Product Security Teams
                                          1. Development Team Responsibilities
                                            1. Operations Security Duties

                                          Previous

                                          2. Foundational Security Principles

                                          Go to top

                                          Next

                                          4. Secure Design and Architecture