OWASP Global AppSec US 2021

With the business increased the pressure and demand for flexibility of the development team, the agile movement was pushed to the limits. CI/CD was born to reduce manual steps to reduce human errors and increase speed to go-live! Last not least, with DevOps the teams took application responsibilities, from cradle to grave. Many security teams still struggling on catching up with the current speed of software development and releases. Software security knowledge and experience is missing in most full-stack developers' resumes. Application security is kept out of the development teams responsibility and regarded as a responsibility of the  security department. Pity, because agile, CI/CD and DevOps are security enabling practices! This session is explaining Shift-left, early security enablement in the development Lifecycle. As the application development becomes more developer centric, the developer’s toolset must match the new challenges to have responsibilities matching capabilities. Learn from rugged software to supply chain cleanliness. Learn to avoid the common pitfalls and benefits of modern application development strategies. Hear why security champions programmes tend to fail, compliance driven security training is a waste of time and money. Take back the best practices, proven solutions and how to Shift Left beyond the development