Call us now:
Agile has been around for more years than I care to remember. What is now called agile programme management is a process we used in the design and manufacture of jet engines back in the 1990s. We learnt very early on that a paradigm of agile was ‘making more crap quicker’ if you got the process wrong. But when you make things which kill people, the development process software or otherwise was pretty well managed.
The US Defense Innovation Board reached a conclusion back in March 2019 that the DoD’s approach to software development was broken. Repeating what many studies have concluded over the past 30 years, that the current approach to developing software in the DoD is broken. Probably the reason why the enclosed has been published, a simple guide to whether or not an agile process is being run or not.
Importantly for security, it helps programme teams identify where things are not quite working out. Where the software developers aren’t speaking to key stakeholders (the CISO). That it is at the boundaries of teams where the issues lie in achieving success and in the case of security the boundary between the security teams and the developers.
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6582258847740682240