Overview of NIST Secure Software Development, Security, & Operations (DevSecOps) Practices Project

Описание: In this NIST virtual event, Alper Kerman provides an overview of a NIST consortium project led by the National Cybersecurity Center of Excellence (NCCoE) in collaboration with 14 industry partners. The project supports the directive outlined in Executive Order 14028 and focuses on demonstrating practical DevSecOps security practices aligned with the NIST Secure Software Development Framework (SSDF).

Alper explains how the project aims to improve security across the entire software development life cycle—from planning and development to deployment, operation, and maintenance—within real-world cloud-based software development environments. The initial focus is on closed-source, cloud-based development environments, with future consideration for open-source environments.

The presentation walks through each phase of the DevSecOps lifecycle, including plan, develop, build, test, release, deploy, and operate, describing the key security activities and technical components involved in each phase. These activities are mapped directly to SSDF practice groups and tasks, demonstrating how organizations can operationalize SSDF guidance in practice.

In addition, the project showcases how AI capabilities can be securely integrated to automate builds, integrations, deliveries, and deployments, as well as how Zero Trust security principles can further strengthen security postures in modern software development environments.

The session concludes with an overview of project timelines, ongoing Zero Trust efforts, and upcoming deliverables, including a future release of a NIST Special Publication documenting the project’s outcomes.

Event Details: https://www.nccoe.nist.gov/get-involv...
NIST National Cybersecurity Center of Excellence (NCCoE) Secure Software Development, Security, and Operations (DevSecOps) Practices Project Details: https://www.nccoe.nist.gov/projects/s...

Subscribe to NextLabs:    / @nextlabsinc  

Learn more about NextLabs:
Website: https://www.nextlabs.com/
LinkedIn:   / nextlabs  
Facebook:   / nextlabsinc  
Twitter:   / nextlabs  

About NextLabs:
NextLabs®, Inc. provides zero trust data-centric security software to protect business critical data and applications. Our patented dynamic authorization technology and industry leading attribute-based zero trust policy platform helps enterprises identify and protect sensitive data, monitor and control access to the data, and prevent regulatory violations – whether in the cloud or on premises. The software automates enforcement of security controls and compliance policies to enable secure information sharing across the extended enterprise. NextLabs has some of the largest global enterprises as customers and has strategic relationships with industry leaders such as SAP, Siemens, Microsoft, AWS, Accenture, Deloitte, Infosys, and IBM. For more information on NextLabs, please visit http://www.nextlabs.com.

Why NextLabs?
NextLabs is a proven industry innovator and leader with 80+ patents awarded and another 30+ pending in dynamic authorization and ABAC.
NextLabs solutions have been validated by industry leaders and analysts such as SAP, Microsoft, NIST, and Gartner.
Comprehensiveness and performance of the NextLabs portfolio is unique in the industry.