Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.
Intro
Lead Security Architect Cabinet Office UK Government
Certification Accreditation PCI ISO27001
Change control boards
Agile changes everything
Individuals and interactions over processes and tools
Working software over comprehensive documentation
Responding to change over following a plan
Customer collaboration over contract negotiation
Contracts, Planning, Documentation, Processes and Tools
Building software together
Maximising work not done
Minimum viable product or service
Protect personal data
Security design principles
8 Principles of risk management
Accept uncertainty Security as part of the team Understand the risks
Trust decision making Security is part of everything User experience is important
Audit decisions Understand big picture impact
How does agile help?
Continual delivery of business value
Security must be an enabler of the team
Safety engineering and security engineering
The unit of delivery is the team
The unit of decision making is the team
Educate the team to the threats
Keep a running risk log
Apply risk decisions per story
Apply controls per story
Security debt
Choosing the secure method must be the easiest option
Dealing with patches
Updating machines in test
Automated Testing
Fast repeatable deploys
Code review of infrastructure changes
Application whitelisting
Minimise administrative controls
GOTO Conferences
Get personalized course recommendations, track subjects and courses with reminders, and more.
