Tag

risk management

14 articles

Latest in risk management

Best Practices

Why Continuous Vulnerability Management Belongs in Every DevSecOps Strategy

DevSecOps is part of the larger shift-left IT paradigm, which aims to identify and address vulnerabilities before they lead to security incidents. NIST’s guidance on secure software development emphasizes integrating security thro…

Oct 27, 20263 min

All risk management Articles

Showing 1–14 of 14

Sep25

Blogs

DevSecOps Teams as Partners in Secure Software Delivery

DevSecOps teams can reduce last-minute release delays by shifting security decisions earlier, improving guardrails, clarifying ownership and making findings actionable.

3 min

Mar16

Blogs

Gemini CLI Plan Mode Separates Thinking From Doing — and Makes Read-Only the Default

Google’s Gemini CLI Plan Mode enforces read-only research-first workflows—using higher-reasoning models for strategy, ask_user prompts for clarification, and read-only MCP integrat…

3 min

Feb18

Blogs

Tool Fragmentation is Breaking Delivery Context — Here’s What Teams are Learning

Explore the emerging crisis in application delivery caused by tool fragmentation in modern software development. This article discusses the need for semantic interoperability, cont…

3 min

Feb18

Blogs

Secrets Management Failures in CI/CD Pipelines

Explore the critical role of secrets management in CI/CD pipelines and its impact on cybersecurity. This article highlights the risks of credential exposure, the importance of impl…

3 min

Feb04

4 Security Risks of AI Code Assistants

AI coding assistants can introduce vulnerabilities, privacy risks, and dependency issues. Learn key cybersecurity practices to safely use AI in software development.

3 min

Jan14

Blogs

Security Controls That Slow Teams Are Usually Poorly Designed

Discover strategies to enhance security controls in DevOps, emphasizing the shift from gates to guardrails and the importance of designing around real workflows.

3 min

Jan13

Lessons from 2025: The Year “Agent Mitigation” Became a Thing

Explore the emergence of agent mitigation as a formal discipline in response to 2025’s AI failures, highlighting best practices for secure and reliable AI agent deployment.

3 min

Apr22

Blogs

Veracode Extends Scope and Reach of DevSecOps Portfolio

Veracode today updated its risk management tool to provide integration with Kubernetes runtime environments, increased integration with code repositories to make it simpler to iden…

3 min

Sep02

Blogs

Avoid Security Apathy with DevSecOps

Against the backdrop of rapid digital transformation accelerated by the pandemic, every industry has seen an increase in high-level cybersecurity breaches. As organizations continu…

3 min

May19

Blogs

Our API Mess is Coming

APIs are the satisfaction of a long and deep need to be able to create consistent and reliable integrations between disparate systems, operating systems and datasets. As we started…

3 min

Mar23

Business of DevOps

Managing Business Risk in a DevOps Context

We hear a lot in the industry about the importance of automation in DevOps to enable speed. However, there is another element that is often missing in the discussion – risk, compli…

3 min

Mar02

Blogs

Cloud Migrations Demand Risk and Compliance Maturity

The COVID-19 pandemic brought undeniable disruptions for organizations and their employees whether business, personal or otherwise. Across the globe, businesses and governments ali…

3 min

Jan18

DevOps Practice

Managing Data Risk in 2021

You can’t protect your data if you don’t know where it is stored. The first thing to consider when creating a risk-based approach to data protection is the ability to identify and…

3 min