Secure Delivery & Cloud Security 95
- How to Lead a Review of AWS Security Engineering
- Measuring AWS Security Engineering Without Vanity Metrics
- Turning Requirements for AWS Security Engineering into Delivery Guardrails
- Designing AWS Security Engineering: Trust Boundaries, Failure Modes, and Tradeoffs
- A Practical Risk Model for AWS Security Engineering
- A Practical Failure Exercise for Python Security Automation
- Python Security Automation in Production: Signals That Show the Control Works
- Implementing Python Security Automation Without Slowing Delivery
- Failure Modes in Python Security Automation: A Design-Level Analysis
- Defining the Security Outcome for Python Security Automation
- How to Lead a Review of Third-Party Component Security
- Measuring Third-Party Component Security Without Vanity Metrics
- Turning Requirements for Third-Party Component Security into Delivery Guardrails
- Designing Third-Party Component Security: Trust Boundaries, Failure Modes, and Tradeoffs
- A Practical Risk Model for Third-Party Component Security
- A Team Playbook for Improving Security Guardrails and Paved Roads
- Operating Security Guardrails and Paved Roads: Ownership, Evidence, and Exceptions
- Engineering Security Guardrails and Paved Roads into the Paved Road
- An Architecture Review Playbook for Security Guardrails and Paved Roads
- Security Guardrails and Paved Roads: What the Team Must Decide Before Building
- A Team Playbook for Improving Cloud Data Protection
- Operating Cloud Data Protection: Ownership, Evidence, and Exceptions
- Engineering Cloud Data Protection into the Paved Road
- An Architecture Review Playbook for Cloud Data Protection
- Cloud Data Protection: What the Team Must Decide Before Building
- A Practical Failure Exercise for Cloud Network Security
- Cloud Network Security in Production: Signals That Show the Control Works
- Implementing Cloud Network Security Without Slowing Delivery
- Failure Modes in Cloud Network Security: A Design-Level Analysis
- Defining the Security Outcome for Cloud Network Security
- A Team Playbook for Improving Cloud Identity and Access Management
- Operating Cloud Identity and Access Management: Ownership, Evidence, and Exceptions
- Engineering Cloud Identity and Access Management into the Paved Road
- An Architecture Review Playbook for Cloud Identity and Access Management
- Cloud Identity and Access Management: What the Team Must Decide Before Building
- How to Lead a Review of SBOMs and Build Provenance
- Measuring SBOMs and Build Provenance Without Vanity Metrics
- Turning Requirements for SBOMs and Build Provenance into Delivery Guardrails
- Designing SBOMs and Build Provenance: Trust Boundaries, Failure Modes, and Tradeoffs
- A Practical Risk Model for SBOMs and Build Provenance
- A Practical Failure Exercise for Software Supply Chain Security
- Software Supply Chain Security in Production: Signals That Show the Control Works
- Implementing Software Supply Chain Security Without Slowing Delivery
- Failure Modes in Software Supply Chain Security: A Design-Level Analysis
- Defining the Security Outcome for Software Supply Chain Security
- A Team Playbook for Improving CI/CD Pipeline Security
- Operating CI/CD Pipeline Security: Ownership, Evidence, and Exceptions
- Engineering CI/CD Pipeline Security into the Paved Road
- An Architecture Review Playbook for CI/CD Pipeline Security
- CI/CD Pipeline Security: What the Team Must Decide Before Building
- How to Lead a Review of Kubernetes Security
- Measuring Kubernetes Security Without Vanity Metrics
- Turning Requirements for Kubernetes Security into Delivery Guardrails
- Designing Kubernetes Security: Trust Boundaries, Failure Modes, and Tradeoffs
- A Practical Risk Model for Kubernetes Security
- A Practical Failure Exercise for Container Security
- Container Security in Production: Signals That Show the Control Works
- Implementing Container Security Without Slowing Delivery
- Failure Modes in Container Security: A Design-Level Analysis
- Defining the Security Outcome for Container Security
- A Team Playbook for Improving Infrastructure as Code Security
- Operating Infrastructure as Code Security: Ownership, Evidence, and Exceptions
- Engineering Infrastructure as Code Security into the Paved Road
- An Architecture Review Playbook for Infrastructure as Code Security
- Infrastructure as Code Security: What the Team Must Decide Before Building
- How to Lead a Review of Secrets Management
- Measuring Secrets Management Without Vanity Metrics
- Turning Requirements for Secrets Management into Delivery Guardrails
- Designing Secrets Management: Trust Boundaries, Failure Modes, and Tradeoffs
- A Practical Risk Model for Secrets Management
- A Practical Failure Exercise for Dependency Risk Management
- Dependency Risk Management in Production: Signals That Show the Control Works
- Implementing Dependency Risk Management Without Slowing Delivery
- Failure Modes in Dependency Risk Management: A Design-Level Analysis
- Defining the Security Outcome for Dependency Risk Management
- A Team Playbook for Improving Dynamic Application Security Testing
- Operating Dynamic Application Security Testing: Ownership, Evidence, and Exceptions
- Engineering Dynamic Application Security Testing into the Paved Road
- An Architecture Review Playbook for Dynamic Application Security Testing
- Dynamic Application Security Testing: What the Team Must Decide Before Building
- How to Lead a Review of Static Application Security Testing
- Measuring Static Application Security Testing Without Vanity Metrics
- Turning Requirements for Static Application Security Testing into Delivery Guardrails
- Designing Static Application Security Testing: Trust Boundaries, Failure Modes, and Tradeoffs
- A Practical Risk Model for Static Application Security Testing
- A Practical Failure Exercise for Security Requirements
- Security Requirements in Production: Signals That Show the Control Works
- Implementing Security Requirements Without Slowing Delivery
- Failure Modes in Security Requirements: A Design-Level Analysis
- Defining the Security Outcome for Security Requirements
- A Team Playbook for Improving Secure Software Development Lifecycle
- Operating Secure Software Development Lifecycle: Ownership, Evidence, and Exceptions
- Engineering Secure Software Development Lifecycle into the Paved Road
- An Architecture Review Playbook for Secure Software Development Lifecycle
- Secure Software Development Lifecycle: What the Team Must Decide Before Building