Mike Bursell

Many DevOps proponents in our organizations come from a technical background or are so immersed in technology that every problem looks like it can be solved with new technology or new tooling. This featured presentation will argue that the move to a true DevSecOps model is at least as much about cultural change as it is about the technologies and the methodologies. Getting developers to talk to the security experts in your organization may be hard enough, but in order to succeed, you need to include operations, product management, testing, and even involve management. This session addresses some of the cultural changes you may have already come across, as well as some that you may not have yet encountered, and will present approaches that will help you ease the various parts of your organization into a DevSecOps mindset.