InfoQ Homepage Risk Management Content on InfoQ

Articles

RSS Feed

Newer Older

DevOps

Proactive Approaches to Securing Linux Systems and Engineering Applications

Maintaining a strong security posture is challenging, especially with Linux. An effective approach is proactive and includes patch management, optimized resource allocation, and effective alerting.

Prashanth Ravula
on Oct 07, 2024
DevOps

From Compliance-First to Risk-First: Why Companies Need a Culture Shift

Transitioning from a "Compliancе-First" approach to a "Risk-First" mindset rеcognizеs that compliancе should not be viеwеd in isolation, but as a componеnt of a broadеr risk managеmеnt strategy.

Shailesh Rangari
on Dec 26, 2023
Culture & Methods

Secure Delivery: Better Workflows for Secure Systems and Pain-Free Delivery

The software delivery process has been transformed in the last decade; we’ve adopted well-understood workflows around functions such as testing, release management and operational support. In this article we'll explore the impact that security workflows have on software delivery, explain the root causes and share battle-proven techniques to show how we can make delivering secure software easier.

Chris Rutter
on Feb 10, 2023
DevOps

Successfully Integrating Dynamic Security Testing into Your CI/CD Pipeline

Dynamic security testing tools don’t require advanced cybersecurity knowledge to operate. Integrating DAST into your CI/CD pipeline should be done in stages by focusing on the riskiest areas first.

Akira Brand
on Oct 21, 2022
Development

Mitigating Inside and Outside Threats with Zero Trust Security

As ransomware and phishing attacks increase, it is evident that attack vectors can be found on the inside in abundance. Zero Trust Security can be thought of as a new security architecture approach where the main goals are: verifying endpoints before any network communications take place, giving least privilege to endpoints, and continuously evaluating the endpoints throughout the communication.

Sindhuja Rao
on Jan 14, 2022
DevOps

Application Security Manager: Developer or Security Officer?

The role of the Application Security Manager (ASM) should be the driving force of the overall code review process. An ASM should know about development processes, information security principles, and have solid technical skills. To get a good ASM you can either use experts from a service provider or grow an in-house professional from developers or security specialists.

Daniil Chernov
on Oct 20, 2021
Culture & Methods

Building Stronger Human Teams by Managing the Inner Lizards

Each of us has an inner lizard that frets constantly about our safety. People come with brains that are pre-configured to scan everything you say for threats to their safety. Learning to recognize when you're operating under reptilian influence is a great start. This article introduces some techniques to help you manage the lizard within you along with those around you.

Mike Duskis
on Jul 01, 2021
Culture & Methods

Signs You’re in a Death Spiral (and How to Turn It around before It’s Too Late)

Don’t let feature work blind you. Enterprises are ramping up their software delivery to compete in the digital-first world. But more features and faster time-to-market can lead your business into a death spiral if you neglect technical debt and risk work. Learn how to use value stream metrics to identify whether your business is in danger and how to reverse the trajectory before it’s too late.

Lee Reid Patrick Anderson
on Apr 13, 2021
Culture & Methods

Kick-off Your Transformation by Imagining It Had Failed

Large scale change initiatives have a worryingly high failure rate, the chief reason for which is that serious risks are not identified early. One way to create the safety needed for everyone to speak openly about the risks they see is by running a pre-mortem. In a pre-mortem, we assume that the transformation had already failed and walk backward from there to investigate what led to the failure.

Ayman Idris
on Nov 27, 2020
Architecture & Design

Three Major Cybersecurity Pain Points to Address for Improved Threat Defense

Three pain points every company must address when addressing cybersecurity include threat volume and complexity, a growing cybersecurity skills gap, and the need for threat prioritization. This article describes each of these in some detail, and includes recommendations for corporations to deal with them.

Jonathan Zhang
on Oct 15, 2019
Culture & Methods

How Developers Can Learn the Language of Business Stakeholders

This article explores how business stakeholders and developers can improve their collaboration and communication by learning each other's language and dictionaries. It explores areas where there can be the most tension: talking about impediments and blockers, individual and team learning, real options, and risk management.

Anna Radzikowska
on Jul 04, 2019
Culture & Methods

Q&A on the Book Risk-First Software Development

The book Risk-First Software Development by Rob Moffat views all of the activities on a software project through the lens of managing risk. It introduces a pattern language to classify different risks, provides suggestions for balancing risks, and explores how software methodologies view risks.

Ben Linders Rob Moffat
on Jun 18, 2019