Working Group
DevSecOps
This group defines best practices and provides guidance and playbooks to help teams implement security into their DevOps process.
View Current Projects
Six Pillars of DevSecOps
Working Group Co-Chairs
Roupe Sahans
DevSecOps Leader
Roupe leads DevSecOps delivery and thought leadership for technology and media clients embracing digital transformation.
Roupe started his DevOps journey in 2016, building containerised microservices on AWS for government platforms. He has since been working with engineers to c-suite executives to embed security and resilience into digital products, secure cloud services, and reduce cyber technical-debt.
Most recently Roupe ha...
Abdul Sattar
| Publications in Review | Open Until |
|---|---|
| AICM mapping to BSI AI C4 Catalog | Mar 24, 2025 |
| CCMv4.0 Mapping to HITRUST CSF v11.3 | Mar 25, 2025 |
| SaaS Technical Controls Final Draft | Apr 03, 2025 |
| The State of Data Privacy Engineering | Apr 12, 2025 |
Who can join?
Anyone can join a working group, whether you have years of experience or want to just participate as a fly on the wall.
What is the time commitment?
The time commitment for this group varies depending on the project. You can spend a 15 minutes helping review a publication that's nearly finished or help author a publication from start to finish.
Virtual Meetings
Attend our next meeting. You can just listen in to decide if this group is a good for you or you can choose to actively participate. During these calls we discuss current projects, and well as share ideas for new projects. This is a good way to meet the other members of the group. You can view all research meetings here.
Mar
20
CSA DevSecOps WG - MLOps Papers Working Session
This is a working session to sync on the current MLOps whitepapers the DevSecOps working group is currently writing.
We meet every other Thursday at 8am Pacific Time.
Writing will mostly be done asynchronously between meetings.
Useful links:
- Zoom Meeting Link: https://csaurl.org/devsecops-call
- CSA Public Slack: https://csaurl.org/csa-public-slack
- Working Group Slack Channel: #devsecops-working-group
Apr
3
CSA DevSecOps WG - MLOps Papers Working Session
This is a working session to sync on the current MLOps whitepapers the DevSecOps working group is currently writing.
We meet every other Thursday at 8am Pacific Time.
Writing will mostly be done asynchronously between meetings.
Useful links:
- Zoom Meeting Link: https://csaurl.org/devsecops-call
- CSA Public Slack: https://csaurl.org/csa-public-slack
- Working Group Slack Channel: #devsecops-working-group
Apr
17
CSA DevSecOps WG - MLOps Papers Working Session
This is a working session to sync on the current MLOps whitepapers the DevSecOps working group is currently writing.
We meet every other Thursday at 8am Pacific Time.
Writing will mostly be done asynchronously between meetings.
Useful links:
- Zoom Meeting Link: https://csaurl.org/devsecops-call
- CSA Public Slack: https://csaurl.org/csa-public-slack
- Working Group Slack Channel: #devsecops-working-group
May
1
CSA DevSecOps WG - MLOps Papers Working Session
This is a working session to sync on the current MLOps whitepapers the DevSecOps working group is currently writing.
We meet every other Thursday at 8am Pacific Time.
Writing will mostly be done asynchronously between meetings.
Useful links:
- Zoom Meeting Link: https://csaurl.org/devsecops-call
- CSA Public Slack: https://csaurl.org/csa-public-slack
- Working Group Slack Channel: #devsecops-working-group
Open Peer Reviews
Peer reviews allow security professionals from around the world to provide feedback on CSA research before it is published.