CSA Research Publications
Whitepapers, Reports and Other Resources
Browse Publications
 | The Six Pillars of DevSecOps: Measure, Monitor, Report, and Action The implementation and maintenance of DevSecOps initiatives can take anywhere from a few months to several years to implement. Therefore, continuous measu... Request to download |
 | The Six Pillars of DevSecOps - Collaboration and Integration “Security can only be achieved through collaboration, not confrontation” is one of the defining principles of DevSecOps. Essentially, security is a team s... Request to download |
 | The Six Pillars of DevSecOps: Automation - Chinese Translation This localized version of this publication was produced from the original source material through the efforts of chapters and volunteers but the translate... Request to download |
 | DevSecOps - Pillar 4 Bridging Compliance and Development - Chinese Translation This localized version of this publication was produced from the original source material through the efforts of chapters and volunteers but the translate... Request to download |
 | The Six Pillars of DevSecOps: Automation - Japanese Translation This localized version of this publication was produced from the original source material through the efforts of chapters and volunteers but the translate... Request to download |
 | The Six Pillars of DevSecOps - Pragmatic Implementation Organizations have a wide array of tools and solutions to choose from when implementing security into the software development process. They often end up ... Request to download |
 | DevSecOps - Pillar 4 Bridging Compliance and Development Given the rapid evolution of software development paradigms and practices, it has become a challenge to align monolithic security compliance activities wi... Request to download |
 | Secure DevOps and Misconfigurations Survey Report Secure DevOps, DevSecOps, and “shifting left” have become increasingly popular terms in cybersecurity. With the rapid increase both in volume and speed to... Request to download |
 | The Six Pillars of DevSecOps: Automation Automation is a critical component of DevSecOps because it enables process efficiency, allowing developers, infrastructure, and information security teams to... Request to download |
 | The Six Pillars of DevSecOps: Collective Responsibility The DevSecOps Working Group identified and defined six focus areas critical to integrating DevSecOps into an organization, in accordance with the six pillars... Request to download |
 | Six Pillars of DevSecOps In our current state of cyber security, there has been a large growth of application flaws that bypass the continuing addition of security frameworks to ensu... Request to download |
 | Information Security Management through Reflexive Security This document defines “Reflexive Security” as a new security management approach that is built upon the interrelationships between security, development and ... Request to download |