How Product Ownership works in the Real World

Scrum continues to insist that a single person play the role of Product Owner on a development project. One person…

Read More »

Driving Devops

There is a lot of talk in the devops community about the importance of sharing principles and values, and about…

Read More »

Agile – What’s a Manager to Do?

As a manager, when I first started learning about Agile development, I was confused by the fuzzy way that Agile…

Read More »

Secure DevOps – Seems Simple

The DevOps security story is deceptively simple. It’s based on a few fundamental, straight forward ideas and practices: Smaller Releases…

Read More »

Application Security – Can you Rely on the Honeymoon Effect?

I learned about some interesting research from Dave Mortman at this year’s RSA conference in San Francisco which supports the…

Read More »

Implementing Static Analysis isn’t that easy

Static Analysis Testing (SAST) for software bugs and vulnerabilities should be part of your application security – and software quality…

Read More »

Can you Learn and Improve without Agile Retrospectives? Of course you can…

Retrospectives – bringing the team together on a regular basis to examine how they are working and identify where and…

Read More »

Developers working in Production. Of course! Maybe, sometimes. What, are you nuts?

One of the basic ideas in Devops is that developers and operations should share responsibility for designing systems, for implementing…

Read More »

How much can Testers help in Appsec?

It’s not clear how much of a role QA – which in most organizations means black box testers who do…

Read More »