{"id":8737,"date":"2019-05-24T03:57:58","date_gmt":"2019-05-24T03:57:58","guid":{"rendered":"https:\/\/nsfocusglobal.com\/?p=8737"},"modified":"2026-04-17T18:07:53","modified_gmt":"2026-04-17T18:07:53","slug":"a-look-into-rsa-2019-cultural-blending-and-capability-building-during-the-implementation-of-devsecops","status":"publish","type":"post","link":"https:\/\/nsfocusglobal.com\/pt-br\/a-look-into-rsa-2019-cultural-blending-and-capability-building-during-the-implementation-of-devsecops\/","title":{"rendered":"A Look into RSA 2019: Cultural Blending and Capability Building During the Implementation of DevSecOps"},"content":{"rendered":"


\n<\/p>\n

As an increasing mature technical system in the security domain, DevSecOps, in nature, inherits the concept of shifting security to the left during the security development lifecycle (SDL). Simply speaking, DevSecOps is capability integration, continuous learning, and cultural blending. In fact, the concept of “blending” is also reflected by the theme of the DevSecOps Day at RSAC 2019, namely, “DevOps Connect”. The concept calls for CI\/CD (continuous integration and continuous delivery and effective measurement to improve the efficiency.<\/p>\n

<\/p>\n

At RSA Conference 2019, cultural blending and various conflicts are focal topics of speakers. Conflicts include the conflict between the red team culture and developers, conflict between technical and non-technical staff (including functional departments, such as the HR department), and conflict between managers and those that are managed. For example, the red team tends to create a “surprise” (disclosing high-risk vulnerability without providing a solution) and obtain “confidential information” (namely, the red team covering for privacy data theft), which can hardly be accepted by developers and organizations.<\/p>\n

\"Red<\/a><\/p>\n

Cultural conflict<\/p>\n

A large number of practitioners have recognized the cultural conflicts brought by the implementation of DevSecOps and actively try to solve this problem, with cultural transformation as an importance means. In this context, Larry Maccherone put forward the Dev[Sec]Ops manifesto at RSA Conference 2019 as follows:\n<\/p>\n