Trying but failing to keep up by applying slower, traditional security measures to an agile process or a frequently changing cloud environment, often towards the end of the development process, is a waste of time. Instead, a more agile system is needed, one that is applied at all lifecycle stages—from conception to implementation, deployment, and maintenance. Complementing both Dev and Ops, and o en bundled with regulatory compliance, Sec should become a bridge to help move from a slower, traditional security approach to a modern, cloud enabled, high frequency, high capacity practice.
