Examples of Technical Debt's Cybersecurity Impact
Abstract
Organizations have turned to methods such as DevSecOps to reduce cybersecurity risk, with varying results. DevSecOps seeks ways to reduce total cost, deliver on time, and improve productivity, all while improving quality and security. Although the term DevSecOps is often linked to tools and automation, experienced DevSecOps practitioners understand that tools and automation alone cannot ensure security, particularly where there is substantial technical debt, nor can tools and automation ensure that practitioners will recognize and eliminate technical debt in the first place.
Document Details
- Document Type
- Technical Report
- Publication Date
- Jul 01, 2021
- Accession Number
- AD1144728
Entities
People
- Carol C. Woody
- Ipek Ozkaya
- Robert Nord
Organizations
- Carnegie Mellon University