Engineering Secure Software Development Lifecycle into the Paved Road
A practical security engineering field guide to secure software development lifecycle, covering risk, implementation, evidence, and team leadership.
Nathan Berg
An Architecture Review Playbook for Secure Software Development Lifecycle
A practical security engineering field guide to secure software development lifecycle, covering risk, implementation, evidence, and team leadership.
Secure Software Development Lifecycle: What the Team Must Decide Before Building
A practical security engineering field guide to secure software development lifecycle, covering risk, implementation, evidence, and team leadership.
How to Lead a Review of Security Design Review Programs
A practical security engineering field guide to security design review programs, covering risk, implementation, evidence, and team leadership.
Measuring Security Design Review Programs Without Vanity Metrics
A practical security engineering field guide to security design review programs, covering risk, implementation, evidence, and team leadership.
Turning Requirements for Security Design Review Programs into Delivery Guardrails
A practical security engineering field guide to security design review programs, covering risk, implementation, evidence, and team leadership.
Designing Security Design Review Programs: Trust Boundaries, Failure Modes, and Tradeoffs
A practical security engineering field guide to security design review programs, covering risk, implementation, evidence, and team leadership.
A Practical Risk Model for Security Design Review Programs
A practical security engineering field guide to security design review programs, covering risk, implementation, evidence, and team leadership.
A Practical Failure Exercise for Secure Architecture
A practical security engineering field guide to secure architecture, covering risk, implementation, evidence, and team leadership.
Secure Architecture in Production: Signals That Show the Control Works
A practical security engineering field guide to secure architecture, covering risk, implementation, evidence, and team leadership.