{"id":173778,"date":"2023-11-26T11:58:12","date_gmt":"2023-11-26T10:58:12","guid":{"rendered":"https:\/\/datascientest.com\/en\/?p=173778"},"modified":"2023-11-26T12:04:52","modified_gmt":"2023-11-26T11:04:52","slug":"devsecops-how-does-it-differ-from-devops","status":"publish","type":"post","link":"https:\/\/datascientest.com\/en\/devsecops-how-does-it-differ-from-devops","title":{"rendered":"DevSecOps: How does it differ from DevOps?"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"173778\" class=\"elementor elementor-173778\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-222099e e-flex e-con-boxed e-con\" data-id=\"222099e\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-8afed31 elementor-widget elementor-widget-text-editor\" data-id=\"8afed31\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.15.0 - 02-08-2023 *\/\n.elementor-widget-text-editor.elementor-drop-cap-view-stacked .elementor-drop-cap{background-color:#69727d;color:#fff}.elementor-widget-text-editor.elementor-drop-cap-view-framed .elementor-drop-cap{color:#69727d;border:3px solid;background-color:transparent}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap{margin-top:8px}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap-letter{width:1em;height:1em}.elementor-widget-text-editor .elementor-drop-cap{float:left;text-align:center;line-height:1;font-size:50px}.elementor-widget-text-editor .elementor-drop-cap-letter{display:inline-block}<\/style>\t\t\t\t<h2>DevSecOps is a software development methodology. It consists of adding security to the DevOps development cycle, already integrating teams of developers and operational teams of IT engineers. Find out everything you need to know about this approach: definition, benefits, best practices, training&#8230;<\/h2>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5bd7303 elementor-widget elementor-widget-text-editor\" data-id=\"5bd7303\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>In the past, before the advent of DevOps, companies typically checked the security of their software at the end of the development cycle. Security was perceived as secondary, less important than other stages.<\/p><p>If a security threat was discovered in the almost finished software, it required modifying countless lines of code. This was both laborious and time-consuming. Over time, patching became the preferred method.<\/p><p>This approach to cybersecurity mainly relied on the hope that no problems would arise. It was not yet customary to invest the time and money needed to concretely strengthen software security.<\/p><p>However, over the past decade, the IT infrastructure has evolved significantly without cybersecurity tools keeping pace. <a href=\"https:\/\/datascientest.com\/en\/azure-devops-vs-github-actions-which-is-the-best-ci-cd-tool\">DevOps methodology<\/a> has become predominant in the world of development, but most code testing tools are not fast enough to keep up with this pace.<\/p><p><a href=\"https:\/\/datascientest.com\/en\/devops-pipelines-purpose-and-functionality-explained\">DevOps<\/a> can bring many benefits to a company: it improves collaboration between teams, accelerates time to market, increases productivity, and enhances customer satisfaction.<\/p><p>However, all these benefits can be reduced to ashes in case of an incident. That&#8217;s why <a href=\"https:\/\/datascientest.com\/en\/devops-vs-devsecops-what-are-the-differences\">DevSecOps was born<\/a>, to prioritize cybersecurity in the <a href=\"https:\/\/datascientest.com\/en\/devops-architect-skills-missions-and-salary\">adoption of DevOps.<\/a><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-5d44e89 e-flex e-con-boxed e-con\" data-id=\"5d44e89\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-bc20f66 elementor-widget elementor-widget-heading\" data-id=\"bc20f66\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.15.0 - 02-08-2023 *\/\n.elementor-heading-title{padding:0;margin:0;line-height:1}.elementor-widget-heading .elementor-heading-title[class*=elementor-size-]>a{color:inherit;font-size:inherit;line-height:inherit}.elementor-widget-heading .elementor-heading-title.elementor-size-small{font-size:15px}.elementor-widget-heading .elementor-heading-title.elementor-size-medium{font-size:19px}.elementor-widget-heading .elementor-heading-title.elementor-size-large{font-size:29px}.elementor-widget-heading .elementor-heading-title.elementor-size-xl{font-size:39px}.elementor-widget-heading .elementor-heading-title.elementor-size-xxl{font-size:59px}<\/style><h3 class=\"elementor-heading-title elementor-size-default\">What is DevSecOps?<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3b5fa6e elementor-widget elementor-widget-text-editor\" data-id=\"3b5fa6e\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>In the eyes of many companies, there is a perceived trade-off between speed and security in code delivery. <strong>DevSecOps<\/strong> aims to change this prejudice through an approach where everyone is responsible for security.<\/p><p>The term DevSecOps is a blend of the words &#8220;development,&#8221; &#8220;security,&#8221; and &#8220;operations.&#8221; It involves injecting security practices into the organization&#8217;s<a href=\"https:\/\/datascientest.com\/en\/devops-principle-benefits-training\"> DevOps pipeline<\/a> by incorporating security at every stage of the software development cycle rather than waiting until the end.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e6a26ac elementor-widget elementor-widget-image\" data-id=\"e6a26ac\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.15.0 - 02-08-2023 *\/\n.elementor-widget-image{text-align:center}.elementor-widget-image a{display:inline-block}.elementor-widget-image a img[src$=\".svg\"]{width:48px}.elementor-widget-image img{vertical-align:middle;display:inline-block}<\/style>\t\t\t\t\t\t\t\t\t<figure class=\"wp-caption\">\n\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"800\" height=\"460\" src=\"https:\/\/datascientest.com\/en\/files\/2023\/09\/devops-vs-devsecops2-1024x589.jpg\" class=\"attachment-large size-large wp-image-171264\" alt=\"\" srcset=\"https:\/\/datascientest.com\/en\/files\/2023\/09\/devops-vs-devsecops2-1024x589.jpg 1024w, https:\/\/datascientest.com\/en\/files\/2023\/09\/devops-vs-devsecops2-300x173.jpg 300w, https:\/\/datascientest.com\/en\/files\/2023\/09\/devops-vs-devsecops2-768x442.jpg 768w, https:\/\/datascientest.com\/en\/files\/2023\/09\/devops-vs-devsecops2.jpg 1040w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\t\t\t\t\t<figcaption class=\"widget-image-caption wp-caption-text\"><\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f497ee5 elementor-widget elementor-widget-text-editor\" data-id=\"f497ee5\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>This <strong>approach aims<\/strong> to automate the integration of security at every phase of the software development lifecycle, from initial design to delivery, including testing and deployment.<\/p><p>It represents a natural and necessary evolution of security in the software development field. In the past, security was added at the end of the development cycle by an independent team.<\/p><p>However, this approach was viable in a time when software received only one or two updates per year. With the rise of <a href=\"https:\/\/datascientest.com\/en\/lean-devops-applying-agile-methodology-to-it-for-efficiency\">Agile and DevOps methods aiming to reduce development cycles<\/a> to just a few weeks, a paradigm shift was<a href=\"https:\/\/datascientest.com\/en\/cybersecurity-the-ultimate-guide\"> necessary for cybersecurity.<\/a><\/p><p>With DevSecOps, the security of both the infrastructure and the application is directly integrated into Agile and DevOps processes and tools. Security issues are addressed as soon as they arise, making it simpler and less expensive.<\/p><p>Furthermore, DevSecOps transforms security into a shared responsibility among development, security, and IT teams. It is no longer solely the responsibility of the security team.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-a1f6737 e-flex e-con-boxed e-con\" data-id=\"a1f6737\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-34d4178 elementor-widget elementor-widget-heading\" data-id=\"34d4178\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">What are the benefits of DevSecOps?<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f36efd3 elementor-widget elementor-widget-text-editor\" data-id=\"f36efd3\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Clearly, the two <strong>primary benefits of DevSecOps<\/strong> are speed and security. Development teams deliver higher-quality, more secure code more quickly and, as a result, at a lower cost.<\/p><p>First and foremost, this approach avoids significant time losses during development in the event of a security issue.<\/p><p>Fixing the code and resolving security problems can be very costly and time-consuming. <strong>DevSecOps eliminates the need to repeat this process.<\/strong><\/p><p>Cybersecurity procedures are implemented from the beginning, and the code is reviewed, scanned, and tested throughout the development cycle to detect and address issues as soon as they are identified.<\/p><p>Security concerns are thus corrected before additional dependencies are introduced. Additionally, better collaboration between development, security, and operations teams improves the organization&#8217;s responsiveness to incidents.<\/p><p>In general,<strong> DevSecOps<\/strong> reduces the time required to patch vulnerabilities. Scanning and patching are integrated into the release cycle, increasing the ability to identify and correct common<strong> CVEs (Common Vulnerabilities and Exposures).<\/strong><\/p><p>This limits the window of time during which a hacker can exploit vulnerabilities. Furthermore, <strong>DevSecOps<\/strong> relieves security teams and also simplifies compliance.<\/p><p><strong>Cybersecurity<\/strong> testing can also be integrated into an automated testing suite by operational teams if an organization uses a <a href=\"https:\/\/datascientest.com\/en\/azure-devops-vs-github-actions-which-is-the-best-ci-cd-tool\">CI\/CD (Continuous Integration and Continuous Delivery) pipeline<\/a> to deliver its software.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a8eddcd elementor-widget elementor-widget-image\" data-id=\"a8eddcd\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t<figure class=\"wp-caption\">\n\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/datascientest.com\/wp-content\/uploads\/2022\/08\/devsecops2.jpg\" title=\"\" alt=\"\" loading=\"lazy\" \/>\t\t\t\t\t\t\t\t\t\t\t<figcaption class=\"widget-image-caption wp-caption-text\"><\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b6dbadd elementor-widget elementor-widget-text-editor\" data-id=\"b6dbadd\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><strong>Automating security checks<\/strong> ensures the patching of software dependencies and allows for testing and securing the code with both static and dynamic analyses before the final update is deployed into production.<\/p><p>Lastly, <strong>DevSecOps<\/strong> is an adaptable and repeatable process. This allows for the consistent application of security within the environment, despite changes and the emergence of new requirements.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-3d18463 e-flex e-con-boxed e-con\" data-id=\"3d18463\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-f8ca553 elementor-widget elementor-widget-heading\" data-id=\"f8ca553\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">DevSecOps best practices<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ff93aec elementor-widget elementor-widget-text-editor\" data-id=\"ff93aec\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>The implementation of<strong> DevSecOps<\/strong> is based on the adoption of practices and methods. Here are the main ones.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1aec523 elementor-widget elementor-widget-heading\" data-id=\"1aec523\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\">Shift Left<\/h4>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-823236c elementor-widget elementor-widget-text-editor\" data-id=\"823236c\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>The first principle of <strong>DevSecOps is &#8220;Shift Left.&#8221;<\/strong> Software engineers are encouraged to shift security from the right, representing the end of development, to the left, symbolizing the beginning of the DevOps process.<\/p><p>Security is integrated into the development process from the very start, and architects and <strong>cybersecurity engineers<\/strong> are part of the development team.<\/p><p>Their role is to ensure that every component and configuration element of the stack is patched, securely configured, and documented.<\/p><p>This shift left allows the <strong>DevSecOps team<\/strong> to identify security risks early and ensure that threats are addressed immediately.<\/p><p>The development team must, therefore, think about building the product efficiently while also implementing security along the way.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8c03122 elementor-widget elementor-widget-heading\" data-id=\"8c03122\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\">Secure coding<\/h4>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5c97f4a elementor-widget elementor-widget-text-editor\" data-id=\"5c97f4a\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>The <strong>code of the software<\/strong> must be secure to be highly resistant to vulnerabilities. Otherwise, many security risks can arise, such as a leak of confidential information.<\/p><p>Developers should, therefore,<strong> master security techniques<\/strong>, even if it requires investing time and money in their training. It is also relevant to establish coding standards to assist <a href=\"https:\/\/datascientest.com\/en\/refactoring-databases-and-code-comprehensive-guide-to-the-essentials\">developers in writing clean code.<\/a><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-35b4a9c elementor-widget elementor-widget-image\" data-id=\"35b4a9c\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t<figure class=\"wp-caption\">\n\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/datascientest.com\/wp-content\/uploads\/2022\/08\/devsecops3.jpg\" title=\"\" alt=\"\" loading=\"lazy\" \/>\t\t\t\t\t\t\t\t\t\t\t<figcaption class=\"widget-image-caption wp-caption-text\"><\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-47ff705 elementor-widget elementor-widget-heading\" data-id=\"47ff705\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\">Automation<\/h4>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-024918e elementor-widget elementor-widget-text-editor\" data-id=\"024918e\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Automation is a crucial aspect of DevOps, as well as DevSecOps. It&#8217;s essential to automate security to keep up with the pace of <a href=\"https:\/\/datascientest.com\/en\/azure-devops-pipeline-yaml-why-configure-ci-cd-pipelines-with-yaml\">code delivery within a CI\/CD environment.<\/a><\/p><p>This is especially important for large organizations where developers push various code versions into production multiple times a day.<\/p><p>However, this automation of security needs careful consideration. Choosing the right tools is imperative.<\/p><p>In general,<strong> Static Application Security Testing (SAST)<\/strong> tools are preferred to continuously check and identify potential issues very early in the development cycle.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-cf2a911 elementor-widget elementor-widget-heading\" data-id=\"cf2a911\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\">Training and education<\/h4>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1ffb43a elementor-widget elementor-widget-text-editor\" data-id=\"1ffb43a\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Another essential practice in <strong>DevSecOps is training.<\/strong> Every member of the organization must understand the company&#8217;s security posture, adhere to the same standards, and have a basic knowledge of cybersecurity principles.<\/p><p>This involves a collaboration between teams to educate employees across all departments.<\/p><p>Leaders must also promote a culture of change and communicate security responsibilities.<strong> DevSecOps teams<\/strong> should create a functional system using the appropriate technologies and protocols.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b0fc92c elementor-widget elementor-widget-heading\" data-id=\"b0fc92c\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\">Traceability, auditability and visibility<\/h4>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d20022f elementor-widget elementor-widget-text-editor\" data-id=\"d20022f\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Traceability, auditability, and visibility must be implemented in the <strong>DevSecOps process.<\/strong> This helps gather more information and enhances the security of the environment.<\/p><p>Traceability allows for tracking configuration items throughout the development cycle. It is a crucial point in the control framework, enabling compliance, bug reduction, code security, and maintainability.<\/p><p>Auditability is essential to enable security and compliance checks. These technical, procedural, and administrative security checks must be documented and auditable by members of all teams.<\/p><p>Finally, visibility is indispensable in a <strong>DevSecOps environment.<\/strong> The organization should have a robust monitoring system to measure operational status, send alerts, provide better change tracking, and detect cyberattacks in real-time.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f057152 elementor-widget elementor-widget-image\" data-id=\"f057152\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t<figure class=\"wp-caption\">\n\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/datascientest.com\/wp-content\/uploads\/2022\/08\/devsecops4.jpg\" title=\"\" alt=\"\" loading=\"lazy\" \/>\t\t\t\t\t\t\t\t\t\t\t<figcaption class=\"widget-image-caption wp-caption-text\"><\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-2cef1c5 e-flex e-con-boxed e-con\" data-id=\"2cef1c5\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-92e63a2 elementor-widget elementor-widget-heading\" data-id=\"92e63a2\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">People, processes and technologies: the DevSecOps trinity<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-92bea6b elementor-widget elementor-widget-text-editor\" data-id=\"92bea6b\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><strong>DevSecOps is based on a trinity<\/strong> composed of people, processes, and technologies. These three elements play a significant role in the success of this methodology.<\/p><p>It is imperative that all employees are involved to enable a mature and effective<strong> DevSecOps environment<\/strong>. Convincing senior managers of the relevance of this approach can be challenging, but the surge in data breaches due to a lack of security is a compelling argument.<\/p><p>Processes encompass many components, with standardization and documentation of the workflow being the most crucial. <strong>DevSecOps<\/strong> aims to establish a common framework for the processes of different teams to enhance security during development.<\/p><p>Lastly, technology is necessary for executing the processes. Among the key technologies of <strong>DevSecOps are automation,<\/strong> configuration management, and Security as Code.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-7eec941 e-flex e-con-boxed e-con\" data-id=\"7eec941\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-b3c8d88 elementor-widget elementor-widget-heading\" data-id=\"b3c8d88\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">The challenges of DevSecOps<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-75ac4ab elementor-widget elementor-widget-text-editor\" data-id=\"75ac4ab\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>The<strong> implementation of DevSecOps<\/strong> comes with several challenges to overcome. First and foremost, the project may face significant resistance. In general, major changes are often met with reluctance from the majority.<\/p><p>Furthermore, <strong>DevSecOps<\/strong> relies on collaboration between developers and security professionals. Tensions can arise between these two teams, each blaming the other for the difficulties they encounter.<\/p><p>Another common belief is that increased security hinders innovation and code delivery. Therefore, a cultural shift is necessary for the <strong>implementation of DevSecOps.<\/strong><\/p><p>The global shortage of cybersecurity engineers is another challenge.<\/p><p>There are not enough professionals to meet the demand, and this is particularly problematic for <strong>small and medium-sized enterprises (SMEs).<\/strong><\/p><p>Collaboration between security and operational teams can also create difficulties. In the event of an anomaly, engineers often first suspect an infrastructure or software configuration issue. However, <strong>DevSecOps<\/strong> requires an immediate suspicion of a cyberattack.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-00724f8 elementor-widget elementor-widget-image\" data-id=\"00724f8\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t<figure class=\"wp-caption\">\n\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/datascientest.com\/wp-content\/uploads\/2022\/08\/devsecops5.jpg\" title=\"\" alt=\"\" loading=\"lazy\" \/>\t\t\t\t\t\t\t\t\t\t\t<figcaption class=\"widget-image-caption wp-caption-text\"><\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-a4aa94c e-flex e-con-boxed e-con\" data-id=\"a4aa94c\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-02f77bb elementor-widget elementor-widget-heading\" data-id=\"02f77bb\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">What is a DevSecOps Engineer?<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c622c6d elementor-widget elementor-widget-text-editor\" data-id=\"c622c6d\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>More and more companies recognize the importance of DevSecOps and seek to adopt it to enhance the security of their software. However, this approach requires technical expertise.<\/p><p>The <strong>DevSecOps Engineer<\/strong>, or <strong>DevSecOps professional<\/strong>, is in high demand. They are proficient in the principles and practices of DevSecOps, as well as <a href=\"https:\/\/datascientest.com\/en\/the-power-of-python-annotations-a-guide-to-why-and-how-you-should-use-them\">programming languages like Python<\/a>, Java, and Ruby.<\/p><p>Furthermore, a <strong>DevSecOps engineer<\/strong> uses software tools such as Chef, Puppet, Checkmarx, and ThreatModeler.<\/p><p>They are also experts in threat modeling techniques and risk assessment. Finally, they keep abreast of cybersecurity threat news, emerging best practices, and security software updates.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-d572792 e-flex e-con-boxed e-con\" data-id=\"d572792\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-9b08013 elementor-widget elementor-widget-heading\" data-id=\"9b08013\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">How do you implement DevSecOps?<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c3e0511 elementor-widget elementor-widget-text-editor\" data-id=\"c3e0511\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>The <strong>implementation of DevSecOps<\/strong> can be broken down into eight steps. First, strategic and concise planning is essential. Test criteria and threat models need to be established.<\/p><p>The next step is development, and teams should begin by assessing the maturity of their existing practices. It&#8217;s possible to gather resources from multiple sources to build upon. At this stage, establishing a code assessment system can encourage the uniformity <strong>required by DevSecOps.<\/strong><\/p><p>Building can be automated using tools, allowing the merging of source code and machine code. These tools offer many features such as a wide collection of plugins and multiple user interfaces. Some can even automatically detect vulnerable libraries and replace them with new ones.<\/p><p>Testing relies on a robust automated framework, enabling the integration of strong <a href=\"https:\/\/datascientest.com\/en\/devops-pipelines-purpose-and-functionality-explained\">testing practices into the development pipeline.<\/a><\/p><p>Generally, the deployment stage is carried out using Infrastructure as Code tools. These tools automate the process and accelerate software delivery.<\/p><p>Another crucial step is operations, and teams should take care of periodic maintenance. They should monitor zero-day exploits and secure the infrastructure to eliminate the risk of human error.<\/p><p>The use of continuous monitoring tools is also an important part of the process. It ensures that security systems are functioning as intended.<\/p><p>Finally, scaling<strong> IT infrastructure<\/strong> is essential in the face of cybersecurity threats. Virtualization eliminates the need to expend resources on <strong>maintaining in-house data centers.<\/strong><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8118003 elementor-widget elementor-widget-image\" data-id=\"8118003\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t<figure class=\"wp-caption\">\n\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/datascientest.com\/wp-content\/uploads\/2022\/08\/devsecops6.jpg\" title=\"\" alt=\"\" loading=\"lazy\" \/>\t\t\t\t\t\t\t\t\t\t\t<figcaption class=\"widget-image-caption wp-caption-text\"><\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-9efa4f6 e-flex e-con-boxed e-con\" data-id=\"9efa4f6\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-75a33f7 elementor-widget elementor-widget-heading\" data-id=\"75a33f7\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">How do I take a DevSecOps training course?<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c599c4d elementor-widget elementor-widget-text-editor\" data-id=\"c599c4d\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><strong>DevSecOps<\/strong> experts are in high demand and can benefit from numerous job opportunities and high salaries. However, this requires significant technical skills.<\/p><p>A <strong>DevOps expert<\/strong> is proficient in configuration management, continuous integration and delivery, automation tools, and the cloud. Additionally, a <strong>DevSecOps<\/strong> engineer also handles cybersecurity techniques and tools.<\/p><p>To acquire all these qualifications, you can choose DataScientest. Our DevOps engineer training teaches you how to use all the tools such as Python, Git, <a href=\"https:\/\/datascientest.com\/en\/docker-tutorial-how-to-create-your-first-container\">Docker<\/a>, Kubernetes, or <a href=\"https:\/\/datascientest.com\/en\/aws-elastic-load-balancer-the-solution-that-distributes-network-traffic\">Amazon Elastic Compute Cloud.<\/a><\/p><p>At the end of the program, you will be able to automate the creation of test servers through scripting, securely store data, manage software containers, and monitor the infrastructure. In short, you will have all the skills of a <strong>DevOps professional.<\/strong><\/p><p>Our training program leads to a state-recognized diploma and is conducted entirely online. All our programs adopt a hybrid format that combines flexible learning on a coached platform with <strong>Masterclasses led by a Data Scientist.<\/strong><\/p><p>For this DevOps engineer curriculum, you can choose from three different formats. The intensive BootCamp can be completed in 11 weeks, the Continuous Training in 9 months, and the apprenticeship in 16 weeks.<\/p><p>The training can be fully funded if you are unemployed. Don&#8217;t waste any more time and discover DataScientest&#8217;s DevOps engineer training!<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ea933eb elementor-align-center button-principale elementor-widget elementor-widget-button\" data-id=\"ea933eb\" data-element_type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm elementor-animation-grow\" href=\"https:\/\/datascientest.com\/en\/course-devops\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t<span class=\"elementor-button-text\">Find out more about our DevOps training<\/span>\n\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-ef4238d e-flex e-con-boxed e-con\" data-id=\"ef4238d\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-1d498d8 elementor-widget elementor-widget-html\" data-id=\"1d498d8\" data-element_type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<script type=\"application\/ld+json\">\n{\n  \"@context\": \"https:\/\/schema.org\",\n  \"@type\": \"FAQPage\",\n  \"mainEntity\": [{\n    \"@type\": \"Question\",\n    \"name\": \"What is DevSecOps?\",\n    \"acceptedAnswer\": {\n      \"@type\": \"Answer\",\n      \"text\": \"In the eyes of many companies, you have to choose between speed and security for code delivery. DevSecOps aims to change this prejudice, through an approach where everyone is responsible for security. DevSecOps is an umbrella term made up of the words \"development\", \"security\" and \"operations\". It's about injecting security practices into the organization's DevOps pipeline, incorporating security at every stage of the software development cycle rather than waiting until the end.\"\n    }\n  },{\n    \"@type\": \"Question\",\n    \"name\": \"What are the benefits of DevSecOps?\",\n    \"acceptedAnswer\": {\n      \"@type\": \"Answer\",\n      \"text\": \"Clearly, the two main benefits of DevSecOps are speed and security. Development teams deliver better quality, more secure code, more quickly and therefore at lower cost. Firstly, this approach avoids wasting a lot of time during development in the event of a security problem. Fixing code and resolving security issues can be very costly and time-consuming. DevSecOps eliminates the need to repeat this process.\"\n    }\n  },{\n    \"@type\": \"Question\",\n    \"name\": \"What is a DevSecOps Engineer?\",\n    \"acceptedAnswer\": {\n      \"@type\": \"Answer\",\n      \"text\": \"More and more companies understand the importance of DevSecOps, and are looking to adopt it to strengthen the security of their software. However, this approach requires technical expertise.\"\n    }\n  }]\n}\n<\/script>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>DevSecOps is a software development methodology. It consists of adding security to the DevOps development cycle, already integrating teams of developers and operational teams of IT engineers. Find out everything you need to know about this approach: definition, benefits, best practices, training&#8230; In the past, before the advent of DevOps, companies typically checked the security [&hellip;]<\/p>\n","protected":false},"author":67,"featured_media":173781,"comment_status":"open","ping_status":"open","sticky":false,"template":"elementor_theme","format":"standard","meta":{"content-type":"","inline_featured_image":false},"categories":[2421],"tags":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v21.7 (Yoast SEO v21.7) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>DevSecOps: How does it differ from DevOps?<\/title>\n<meta name=\"description\" content=\"In DevSecOps, security is not treated as a separate phase or an afterthought but is an integral part of the entire development process. This approach seeks to bridge the gap between development and security teams, fostering\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/datascientest.com\/en\/devsecops-how-does-it-differ-from-devops\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"DevSecOps: How does it differ from DevOps?\" \/>\n<meta property=\"og:description\" content=\"DevSecOps is a software development methodology. It consists of adding security to the DevOps development cycle, already integrating teams of developers\" \/>\n<meta property=\"og:url\" content=\"https:\/\/datascientest.com\/en\/devsecops-how-does-it-differ-from-devops\" \/>\n<meta property=\"og:site_name\" content=\"Data Science Courses | DataScientest\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/DataScientestEN\" \/>\n<meta property=\"article:published_time\" content=\"2023-11-26T10:58:12+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-11-26T11:04:52+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/datascientest.com\/en\/files\/2023\/11\/devsecops.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"761\" \/>\n\t<meta property=\"og:image:height\" content=\"608\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Melanie\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@DataScientest__\" \/>\n<meta name=\"twitter:site\" content=\"@DataScientest__\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Melanie\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"11 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/datascientest.com\/en\/devsecops-how-does-it-differ-from-devops#article\",\"isPartOf\":{\"@id\":\"https:\/\/datascientest.com\/en\/devsecops-how-does-it-differ-from-devops\"},\"author\":{\"name\":\"Melanie\",\"@id\":\"https:\/\/datascientest.com\/en\/#\/schema\/person\/19d5f7ade9407eb69af3bf6d1ae1731d\"},\"headline\":\"DevSecOps: How does it differ from DevOps?\",\"datePublished\":\"2023-11-26T10:58:12+00:00\",\"dateModified\":\"2023-11-26T11:04:52+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/datascientest.com\/en\/devsecops-how-does-it-differ-from-devops\"},\"wordCount\":2046,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/datascientest.com\/en\/#organization\"},\"articleSection\":[\"Dev\"],\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/datascientest.com\/en\/devsecops-how-does-it-differ-from-devops#respond\"]}],\"copyrightYear\":\"2023\",\"copyrightHolder\":{\"@id\":\"https:\/\/datascientest.com\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/datascientest.com\/en\/devsecops-how-does-it-differ-from-devops\",\"url\":\"https:\/\/datascientest.com\/en\/devsecops-how-does-it-differ-from-devops\",\"name\":\"DevSecOps: How does it differ from DevOps?\",\"isPartOf\":{\"@id\":\"https:\/\/datascientest.com\/en\/#website\"},\"datePublished\":\"2023-11-26T10:58:12+00:00\",\"dateModified\":\"2023-11-26T11:04:52+00:00\",\"description\":\"In DevSecOps, security is not treated as a separate phase or an afterthought but is an integral part of the entire development process. This approach seeks to bridge the gap between development and security teams, fostering\",\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/datascientest.com\/en\/devsecops-how-does-it-differ-from-devops\"]}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/datascientest.com\/en\/#website\",\"url\":\"https:\/\/datascientest.com\/en\/\",\"name\":\"Data Science Courses | DataScientest\",\"description\":\"Leader in Data Science Courses\",\"publisher\":{\"@id\":\"https:\/\/datascientest.com\/en\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/datascientest.com\/en\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/datascientest.com\/en\/#organization\",\"name\":\"DataScientest\",\"url\":\"https:\/\/datascientest.com\/en\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/datascientest.com\/en\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/datascientest.com\/en\/wp-content\/blogs.dir\/9\/files\/2024\/02\/DataScientest_icon_blue-2.png\",\"contentUrl\":\"https:\/\/datascientest.com\/en\/wp-content\/blogs.dir\/9\/files\/2024\/02\/DataScientest_icon_blue-2.png\",\"width\":301,\"height\":301,\"caption\":\"DataScientest\"},\"image\":{\"@id\":\"https:\/\/datascientest.com\/en\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/DataScientestEN\",\"https:\/\/twitter.com\/DataScientest__\",\"https:\/\/www.linkedin.com\/school\/datascientest\/mycompany\/\",\"https:\/\/www.tiktok.com\/@datascientest\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/datascientest.com\/en\/#\/schema\/person\/19d5f7ade9407eb69af3bf6d1ae1731d\",\"name\":\"Melanie\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/datascientest.com\/en\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/8d3d660a0698de06f13ecf4823519da1?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/8d3d660a0698de06f13ecf4823519da1?s=96&d=mm&r=g\",\"caption\":\"Melanie\"},\"url\":\"https:\/\/datascientest.com\/en\/author\/melaniekrause\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"DevSecOps: How does it differ from DevOps?","description":"In DevSecOps, security is not treated as a separate phase or an afterthought but is an integral part of the entire development process. This approach seeks to bridge the gap between development and security teams, fostering","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/datascientest.com\/en\/devsecops-how-does-it-differ-from-devops","og_locale":"en_GB","og_type":"article","og_title":"DevSecOps: How does it differ from DevOps?","og_description":"DevSecOps is a software development methodology. It consists of adding security to the DevOps development cycle, already integrating teams of developers","og_url":"https:\/\/datascientest.com\/en\/devsecops-how-does-it-differ-from-devops","og_site_name":"Data Science Courses | DataScientest","article_publisher":"https:\/\/www.facebook.com\/DataScientestEN","article_published_time":"2023-11-26T10:58:12+00:00","article_modified_time":"2023-11-26T11:04:52+00:00","og_image":[{"width":761,"height":608,"url":"https:\/\/datascientest.com\/en\/files\/2023\/11\/devsecops.webp","type":"image\/webp"}],"author":"Melanie","twitter_card":"summary_large_image","twitter_creator":"@DataScientest__","twitter_site":"@DataScientest__","twitter_misc":{"Written by":"Melanie","Estimated reading time":"11 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/datascientest.com\/en\/devsecops-how-does-it-differ-from-devops#article","isPartOf":{"@id":"https:\/\/datascientest.com\/en\/devsecops-how-does-it-differ-from-devops"},"author":{"name":"Melanie","@id":"https:\/\/datascientest.com\/en\/#\/schema\/person\/19d5f7ade9407eb69af3bf6d1ae1731d"},"headline":"DevSecOps: How does it differ from DevOps?","datePublished":"2023-11-26T10:58:12+00:00","dateModified":"2023-11-26T11:04:52+00:00","mainEntityOfPage":{"@id":"https:\/\/datascientest.com\/en\/devsecops-how-does-it-differ-from-devops"},"wordCount":2046,"commentCount":0,"publisher":{"@id":"https:\/\/datascientest.com\/en\/#organization"},"articleSection":["Dev"],"inLanguage":"en-GB","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/datascientest.com\/en\/devsecops-how-does-it-differ-from-devops#respond"]}],"copyrightYear":"2023","copyrightHolder":{"@id":"https:\/\/datascientest.com\/#organization"}},{"@type":"WebPage","@id":"https:\/\/datascientest.com\/en\/devsecops-how-does-it-differ-from-devops","url":"https:\/\/datascientest.com\/en\/devsecops-how-does-it-differ-from-devops","name":"DevSecOps: How does it differ from DevOps?","isPartOf":{"@id":"https:\/\/datascientest.com\/en\/#website"},"datePublished":"2023-11-26T10:58:12+00:00","dateModified":"2023-11-26T11:04:52+00:00","description":"In DevSecOps, security is not treated as a separate phase or an afterthought but is an integral part of the entire development process. This approach seeks to bridge the gap between development and security teams, fostering","inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/datascientest.com\/en\/devsecops-how-does-it-differ-from-devops"]}]},{"@type":"WebSite","@id":"https:\/\/datascientest.com\/en\/#website","url":"https:\/\/datascientest.com\/en\/","name":"Data Science Courses | DataScientest","description":"Leader in Data Science Courses","publisher":{"@id":"https:\/\/datascientest.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/datascientest.com\/en\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/datascientest.com\/en\/#organization","name":"DataScientest","url":"https:\/\/datascientest.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/datascientest.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/datascientest.com\/en\/wp-content\/blogs.dir\/9\/files\/2024\/02\/DataScientest_icon_blue-2.png","contentUrl":"https:\/\/datascientest.com\/en\/wp-content\/blogs.dir\/9\/files\/2024\/02\/DataScientest_icon_blue-2.png","width":301,"height":301,"caption":"DataScientest"},"image":{"@id":"https:\/\/datascientest.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/DataScientestEN","https:\/\/twitter.com\/DataScientest__","https:\/\/www.linkedin.com\/school\/datascientest\/mycompany\/","https:\/\/www.tiktok.com\/@datascientest"]},{"@type":"Person","@id":"https:\/\/datascientest.com\/en\/#\/schema\/person\/19d5f7ade9407eb69af3bf6d1ae1731d","name":"Melanie","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/datascientest.com\/en\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/8d3d660a0698de06f13ecf4823519da1?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/8d3d660a0698de06f13ecf4823519da1?s=96&d=mm&r=g","caption":"Melanie"},"url":"https:\/\/datascientest.com\/en\/author\/melaniekrause"}]}},"_links":{"self":[{"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/posts\/173778"}],"collection":[{"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/users\/67"}],"replies":[{"embeddable":true,"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/comments?post=173778"}],"version-history":[{"count":0,"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/posts\/173778\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/media\/173781"}],"wp:attachment":[{"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/media?parent=173778"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/categories?post=173778"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/tags?post=173778"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}