/tags/devsecops/ Recent content in DevSecOps on Tracy Bannon Hugo -- gohugo.io en-us Sun, 24 Sep 2023 00:00:00 +0000 /post/2023/2023-09-14-gracehopper_whydidntiknow/ Sun, 24 Sep 2023 00:00:00 +0000 /post/2023/2023-09-14-gracehopper_whydidntiknow/ Discovering Grace Hopper: An Overdue Epiphany in a Multi-Decade Tech We all know who 𝗚𝗿𝗮𝗰𝗲 𝗛𝗼𝗽𝗽𝗲𝗿 is now…and I’m really struggling to figure out why I didn’t know who she was until a few years ago. Consider that I’ve got a few decades under my belt as a software architect and have been part of our evolving technical domain. From the foundational layers of software development to the awesome challenges of complex architectures I’ve found myself immersed in so much cool tech and its adoption. /post/2023/2023-06-13-trustequation/ Tue, 13 Jun 2023 00:00:00 +0000 /post/2023/2023-06-13-trustequation/ It’s odd and simultaneously cool to go back and reference your own book. As a software architect and engineer, being part of a compendium like 𝗥𝗲𝗶𝗻𝘃𝗲𝗻𝘁𝗶𝗻𝗴 𝗖𝘆𝗯𝗲𝗿𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 gave me the opportunity to insert DevSecOps principles and align modern software practices. Perhaps more importantly, was being able to overlay with the most important aspect: the humans and how to build trust. Trust is not something you just ask for or earn. Rather you need to exude trustworthiness and others examine that and decide for themselves if they can or will extend trust. /post/2023/2023-06-11-platformengineeringnextdevops/ Sun, 11 Jun 2023 00:00:00 +0000 /post/2023/2023-06-11-platformengineeringnextdevops/ Is “𝗣𝗹𝗮𝘁𝗳𝗼𝗿𝗺 𝗘𝗻𝗴𝗶𝗻𝗲𝗲𝗿𝗶𝗻𝗴 𝗶𝘀 𝘁𝗵𝗲 𝗻𝗲𝘄 𝗗𝗲𝘃𝗢𝗽𝘀”? Not exactly, no. It is another evolutionary technique to drive quality, security, and time to delivery all while improving developer efficiency. I’ve been noodling on how darned similar the intent of Platform Engineering compared to Framework Architecture from 15 + years ago. Quite a bit of my recent work is on defining reference architecture (RA)for digital platforms and am seeing some comparisons folks will appreciate. /post/podcasts/singles/does2023_promo/ Mon, 05 Jun 2023 00:00:00 +0000 /post/podcasts/singles/does2023_promo/ How is it that I made the promo video? Must just be great insights. ;-) /post/podcasts/singles/applyingaitothesdlc_techsrong/ Mon, 24 Apr 2023 00:00:00 +0000 /post/podcasts/singles/applyingaitothesdlc_techsrong/ Applying AI to the SDLC New Ideas and Gotchas Applying AI to the SDLC New Ideas and Gotchas - Tracy Bannon from Techstrong.TV on Vimeo. /post/2022/2022-11-13-doesopsstillexist/ Sun, 13 Nov 2022 00:00:00 +0000 /post/2022/2022-11-13-doesopsstillexist/ ??? Does Ops still exist ??? This is an honest question. I’ve spent my career knee-deep in software architecture, design, engineering, and delivery. Never once in my adoption of DevOps principles and practices did I think that Ops had gone away OR that Ops had suddenly started to build software products. Y’all probably know my story by now that I am truly Dev married to Ops. My hubby and I started our “Dev + Ops” journey over two decades ago when we both worked for AccuWeather in good ol’ State College PA. /post/podcasts/singles/upstreamlog4j_2022/ Sun, 22 May 2022 00:00:00 +0000 /post/podcasts/singles/upstreamlog4j_2022/ TideLift Upstream Webinar: OSS Supply Chain Security »Click Here to Watch« For years, experts have been telling the government to take stock of the software supply chain by generating software bills of materials and defining standards and policies for use. But it took a few big “oh !@#$%” moments like the SolarWinds and Colonial Pipeline breaches to get the wheels of government really turning around improving software supply chain security. /post/podcasts/singles/nohobbyists_sei_2022/ Fri, 22 Apr 2022 00:00:00 +0000 /post/podcasts/singles/nohobbyists_sei_2022/ #NoHobbyists - How to Shift Security Everywhere CyberSecurity has traditionally been regarded as a function of a distinct security group. In reality, security and cyber resilient software is the responsibility of everyone in the organization. There is a well intended call to “shift security left” but no one knows how! Instead, organizations are depending on developers to become cyber-savvy on their own. Attendees will learn about why to not shift left, how to build a new security culture, and tips, tricks, and tools for moving away from security hobbyists to having experienced pros. /post/podcasts/singles/nicoftime/ Thu, 07 Apr 2022 00:00:00 +0000 /post/podcasts/singles/nicoftime/ In the Nic of Time with Tracy Bannon: Why Culture matters!] Why Culture matters so much to succeed in software innovation, how to attract and retain talent, how to train your teams and what is working or NOT working when it comes to the DoD Software Factories! Nic invites Trac to share her experience in her role with MITRE as Senior Principal/ Software Architect & DevOps Advisor. /post/2022/2022-03-30-cyberops-needs-love-too/ Wed, 30 Mar 2022 00:00:00 +0000 /post/2022/2022-03-30-cyberops-needs-love-too/ Cyber Ops needs love too! We spend much time focused on DEV and often ignoring OPS. I am guilty of this too. I work with the MITRE now; I never realized their emphasis on world class cybersecurity. We work on behalf of the public good. Here are some important Cyber Ops resources: ++ 11 Strategies for CyberSecurity Ops Center - Free download of the 400+ page book OR 20 page summary. /post/2022/2022-03-29-all-that-matters-is-working-code/ Tue, 29 Mar 2022 00:00:00 +0000 /post/2022/2022-03-29-all-that-matters-is-working-code/ The only thing that matters is working code in production! This was a shocking statement by friend and colleague, David Sisk. We worked side by side focused on application architecture and software engineering at Deloitte. David, managed to anger an entire set of senior leaders plus a highly visible methods and tools organization by saying the most important outcome is not documents and decks. Ultimately all that matters is working software. /post/2022/2022-03-devops-misinformation/ Mon, 28 Mar 2022 00:00:00 +0000 /post/2022/2022-03-devops-misinformation/ DevSecOps Misformation is real. Ok, ok, maybe we should say misconceptions? Joan Goodchild wrote a brief blog myth-busting her top 5 DevSecOps fallacies. 1 - DevSecOps Results in Loss of Control - To debunk this myth, leaders need to educate teams on how it works, the value, and share real world experience stories. 2 - You can buy and deploy DevSecOps - I love vendors and marketing folks but… debunking this is another exercise in education and sharing. /post/podcasts/singles/federallowcodetrailblazers/ Wed, 23 Feb 2022 00:00:00 +0000 /post/podcasts/singles/federallowcodetrailblazers/ Federal Low Code Trailblazers with Tracy Bannon and others! Join us for this episode of the Federal Low Code Trailblazers Podcast with Bill Bunce, Pegasystems, and Special Guests Tracy Bannon, Senior Principal/ Software Architect & DevOps Advisor, MITRE and Alex Sutherland, Director, Salesforce Architecture, Liberty IT Solutions as they discuss DevOps, DevSecOps, and containerization throughout the Federal Government. See what processes they recommend to build and sustain DevOps practices, and the current status of of DevOps in the Federal IT ecosystem. /post/2021/fauxscriptkliddie/ Thu, 03 Jun 2021 00:00:00 +0000 /post/2021/fauxscriptkliddie/ A few weeks ago I dusted off my dog-eared copy of ”The Web Application Hacker’s Handbook” by Studdard and Pinto (Yes,I still prefer printed books though I now spring for a second e-version for when I’m traveling.). I’ve installed the most recent version of Burp Suite community edition and OWASP’s ZAP and decided to freshen up my ethical hacking/cyber-student skills. Of course, I am not probing public sites, but rather, using the ethical learning sites: