The Agile/Security Development Life Cycle (A/SDLC): Integrating Security Functionality into the SDLC ~SECOND EDITION

Russo CISSP-ISSAP ITILv3, Mark A

ISBN 10: 1794490574 / ISBN 13: 9781794490574

Editore: Independently published 2019-01, 2019

Riguardo questo articolo

Codice articolo 6666-IUK-9781794490574

Dati bibliografici

• Titolo: The Agile/Security Development Life Cycle (A/SDLC): Integrating Security Functionality into the SDLC ~SECOND EDITION
• Editore: Independently published 2019-01
• Data di pubblicazione: 2019
• Lingua: Inglese
• ISBN 10: 1794490574
• ISBN 13: 9781794490574
• Rilegatura: PF
• Condizione: New

Descrizione articolo

Riassunto

In this SECOND EDITION of THE AGILE SECURITY DEVELOPMENT LIFE CYCLE (A/SDLC) we expand and include new information to improve the concept of "Agile Cyber." We further discuss the need for a Security Traceability Requirements Matrix (SecRTM) and the need to know where all data elements are located throughout your IT environment to include Cloud storage and repository locations. The author continues his focus upon ongoing shortfalls and failures of "Secure System Development." **The author is pleased to announce that this book will be referenced in a pending 2020 release by the OSD CIO in its "Application Security Guide for DOD Acquisitions" ** GO ARMY **The author seeks to use his over 25 years in the public and private sector program management and cybersecurity to create a solution. This book provides the first-ever integrated operational-security process to enhance the readers understanding of why systems are so poorly secured. Why we as a nation have missed the mark in cybersecurity? Why nation-states and hackers are successful daily? This book also describes the two major mainstream "agile" NIST frameworks that can be employed, and how to use them effectively under a Risk Management approach. We may be losing "battles, " but may be its time we truly commit to winning the cyber-war.