Retail may never be the same as it was pre-COVID and the pace of digital transformation keeps pushing faster. Because of the major uptick in volume in ecommerce, retailers' digital presence needs to be responsive and secure. Web applications need to meet customer demands for speed and a simple interface, but with 43% of all breaches occurring as a result of a vulnerable application layer, the security of these applications is critical ...

While it may seem counterintuitive to add another component to developers' workloads, organizations can meet the needs of today's developers by prioritizing effective AppSec training. But what exactly makes AppSec training effective, and how does this differ from the traditional types of educational resources developers are currently exposed to? Let's explore ...

Working in concert with industry partners is a critical step in the software development lifecycle. Collaboration with partners is just as important as analysis and design, but often gets short shrift. Without industry partnerships, both at the technical and business level, the platform will never achieve the necessary velocity and adoption. To help organizations meet their goals, I'd like to highlight three strategies that software teams should consider to strengthen partnerships in the development cycle ...

Organizations need to show agility in the face of ever-changing economic, social, governmental, regulatory, and technology disruptions. Today, in the near post-COVID world, we can work, learn, and socialize from anywhere. The enterprise boundary has been extended beyond the DMZ to the cloud and to your home. This means we can't have a network perimeter-centric view of security anymore; instead, we need to securely enable access for the various users regardless of their location, device, or network ...

Infrastructure as Code. It's not a totally new concept, but it isn't something that everyone is doing at this point. Some have been doing it for a long time. Some have just started the journey. And some have no clue what it even is. We're going to break it down a bit today, and talk about what it is and some of the common issues, or pitfalls, that come along with it ...

Technical debt is an issue that dogs engineering but is a reality of everyday work life. A Gartner report said that "managing technical debt in large legacy environments is the top challenge for infrastructure and operations leaders" ...

When I worked in product management at the start of my career, the saying about product development was "cost, quality and schedule: pick two" with the implication that there is an inverse variation between getting product shipped quickly and cheaply, and therefore quality can suffer. Or, if you want a high degree of quality and to ship it fast, it is more costly because it requires more resources. Thankfully, that saying is no longer true. With a DevOps approach, you can get speed, high quality and cost efficiency at the same time. However, you cannot get to a DevOps approach in your systems development lifecycle (SDLC) without test automation ...