In the last two episodes of the ContinuousX Podcast, hosts Rick Stewart and Mike Fitzurka spoke with James Edmonds, the Project Manager for Kessel Run’s Dagr application, about how DevSecOps has impacted the organization’s culture, and how the organization, as a…
Coldbrew, Ping-Pong, and DevSecOps – a Recipe for Success at Kessel Run
Kessel Run, the operational name for the Air Force Life Cycle Management Center’s (AFLCMC) Detachment 12, is responsible for the creation of the service’s mission-critical applications and software. From the outside looking in, that would appear to be a challenging…
How Kessel Run is “Winning” at Software
The Air Force Life Cycle Management Center’s (AFLCMC) Detachment 12, which goes by the operational name, “Kessel Run,” is one of the most innovative organizations within the Department of Defense (DoD). However, while many across the public and private sectors…
Improving the Provisioning Process to Accelerate the SDLC
While the movement away from the traditional waterfall approach to application development and towards the DevSecOps approach to application development does involve a large change in an organization’s culture and operations, it also is a shift that is facilitated by…
Can DevSecOps and Separation of Duties Coexist?
The cybersecurity concept of Separation of Duties (SoD) involves dividing up responsibilities and permissions so that no one individual has the access, information, or privileges necessary to perpetrate fraud. In fact, SoD is such an important part of government cybersecurity measures, that…
Is a cATO Possible in Today’s Military?
In the last episode of the ContinuousX Podcast, hosts Rick Stewart and Michael Fitzurka of DLT were joined by Kaitlin Bulavinetz, the Chief of Staff to the Chief Software Officer of the United States Air Force, to talk about enabling…
Kaitlin Bulavinetz Discusses the Cultural Changes Needed to Embrace DevSecOps in the Air Force
The benefits of shifting from a traditional “waterfall” approach to application development to a DevSecOps approach to application development have been well documented – including in the GovDevSecOpsHub. Ultimately, by shifting security left in the development process, application development teams…
PODCAST: AST, DevSecOps and Developer Training – Three Essential AppSec Tools
Massive cyberattacks and breaches that originated in applications, including the recent SolarWinds breach that impacted as many as ten government agencies, and the more recent Kaseya breach which may have impacted hundreds of companies, have rightfully raised questions about application…