Working Group
DevSecOps
This group defines best practices and provides guidance and playbooks to help teams implement security into their DevOps process.
View Current Projects
Six Pillars of DevSecOps
Working Group Co-Chairs
Roupe Sahans
DevSecOps Leader
Roupe leads DevSecOps delivery and thought leadership for technology and media clients embracing digital transformation.
Roupe started his DevOps journey in 2016, building containerised microservices on AWS for government platforms. He has since been working with engineers to c-suite executives to embed security and resilience into digital products, secure cloud services, and reduce cyber technical-debt.
Most recently Roupe ha...
Abdul Sattar
| Publications in Review | Open Until |
|---|---|
| AICM Auditing Guidelines | Sep 03, 2025 |
| A Practitioner’s Guide to Post-Quantum Cryptography | Sep 17, 2025 |
| Cloud Threat Modeling 2025 | Sep 19, 2025 |
| Key Management in Cloud Services 2025 Update | Sep 26, 2025 |
Who can join?
Anyone can join a working group, whether you have years of experience or want to just participate as a fly on the wall.
What is the time commitment?
The time commitment for this group varies depending on the project. You can spend a 15 minutes helping review a publication that's nearly finished or help author a publication from start to finish.
Virtual Meetings
Attend our next meeting. You can just listen in to decide if this group is a good for you or you can choose to actively participate. During these calls we discuss current projects, and well as share ideas for new projects. This is a good way to meet the other members of the group. You can view all research meetings here.
Sep
4
CSA DevSecOps WG - MLOps Papers Working Session
This is a working session to sync on the current MLOps whitepapers the DevSecOps working group is currently writing.
We meet every other Thursday at 8:30am Pacific Time.
Writing will mostly be done asynchronously between meetings.
Useful links:
- Zoom Meeting Link: https://csaurl.org/devsecops-call
- CSA Public Slack: https://csaurl.org/csa-public-slack
- Working Group Slack Channel: #devsecops-working-group
Sep
18
CSA DevSecOps WG - MLOps Papers Working Session
This is a working session to sync on the current MLOps whitepapers the DevSecOps working group is currently writing.
We meet every other Thursday at 8:30am Pacific Time.
Writing will mostly be done asynchronously between meetings.
Useful links:
- Zoom Meeting Link: https://csaurl.org/devsecops-call
- CSA Public Slack: https://csaurl.org/csa-public-slack
- Working Group Slack Channel: #devsecops-working-group
Oct
2
CSA DevSecOps WG - MLOps Papers Working Session
This is a working session to sync on the current MLOps whitepapers the DevSecOps working group is currently writing.
We meet every other Thursday at 8:30am Pacific Time.
Writing will mostly be done asynchronously between meetings.
Useful links:
- Zoom Meeting Link: https://csaurl.org/devsecops-call
- CSA Public Slack: https://csaurl.org/csa-public-slack
- Working Group Slack Channel: #devsecops-working-group
Oct
16
CSA DevSecOps WG - MLOps Papers Working Session
This is a working session to sync on the current MLOps whitepapers the DevSecOps working group is currently writing.
We meet every other Thursday at 8:30am Pacific Time.
Writing will mostly be done asynchronously between meetings.
Useful links:
- Zoom Meeting Link: https://csaurl.org/devsecops-call
- CSA Public Slack: https://csaurl.org/csa-public-slack
- Working Group Slack Channel: #devsecops-working-group
Oct
30
CSA DevSecOps WG - MLOps Papers Working Session
This is a working session to sync on the current MLOps whitepapers the DevSecOps working group is currently writing.
We meet every other Thursday at 8:30am Pacific Time.
Writing will mostly be done asynchronously between meetings.
Useful links:
- Zoom Meeting Link: https://csaurl.org/devsecops-call
- CSA Public Slack: https://csaurl.org/csa-public-slack
- Working Group Slack Channel: #devsecops-working-group
Open Peer Reviews
Peer reviews allow security professionals from around the world to provide feedback on CSA research before it is published.