Software developers and project leads are paid to ship product, even if its held together by glue and duct tape.
The problem is they don't have security and risk reduction in their incentives and automation, and they should, call it DevSecOps or whatever. After all, availability is one of the areas of security, but that usually falls on operations.
Software developers and project leads are paid to ship product, even if its held together by glue and duct tape.
The problem is they don't have security and risk reduction in their incentives and automation, and they should, call it DevSecOps or whatever. After all, availability is one of the areas of security, but that usually falls on operations.