Security

When working with Azure PaaS resources, we typically concentrate more on the code implementation part and external Azure Resources like Azure Application Gateway/Front door or Key vault to support Security of PaaS applications. But there are few basic things which are supported by Azure PaaS Resources to help us to tighten internal security, which we may tend to forget sometimes.

Vulnerabilities in software code come in many guises, and a new white paper from Sogeti and Microsoft argues that it would be wrong to focus your security efforts just on proprietary code.

Andy Grove famously wrote – ‘Only the Paranoid survive’ The message still makes sense and the only true solution to attacks is eternal vigilance.

Compliance — it’s both a challenge and an essential confirmation of quality controls within the new DevSecOps methodology, according to a new white paper from Sogeti and Microsoft.

DevOps practices continue to evolve and, in the new iteration that is DevSecOps, security must complement existing business, processes, culture and people. A new white paper from Sogeti and Microsoft cites this as the most challenging part of DevSecOps adoption.

In a series of blog posts, we’re giving you a flavor of all 6 tips, including: Tip 3 : Monitor and observe continuously with purpose.

The rapidly changing world of DevOps and its role in enabling business is fascinating. That’s why I’m excited at the launch of a new paper that I and my colleagues at Sogeti have written in partnership with a great team at Microsoft.

Once upon a time, kings and ministers were wealthy based on the kingdom, the size of produce and the taxes they could levy on it.

The technological world has rapidly developed. In order to satiate the growing hunger, the IT industry adopted a practice known as DevOps.

Organizations view cybersecurity as a critical enabler for business growth. Creating a culture of improvement in security strategy is needed.

Secure code is important. What if a security issue is not found in your code but in one of your dependencies?

In this blog, I will address the growing need to embed a culture of taking the crucial steps in the journey of your security maturity improvement without waiting for an overhaul of your security system overnight.