From a risk-management perspective, DevSecOps engineers and Risk Management Framework (RMF) IT security engineers must be in sync. operational languages. Although their tools and methodologies are similar, areas of significant disparity lead to the two communities speaking different operational languages.
This paper discusses the reasons for this disparity and the potential benefits of bringing these two communities together.
We also present what we think needs to be done so they can integrate, speak a common language, and automate implementations – particularly regarding the RMF process.
We hope is that this paper will be used as a guideline for further research and development (R&D) leading to a more forward leaning and comprehensive security posture. Such a posture will rely less on intermittent monitoring, sporadic manual intervention, and documentation. Instead, it will embrace the principles of agile methodologies, ensuring overall life-cycle security and compliance through automation using emerging tools and technologies.
Sign Up To Receive Your Copy
Join our team today to confront the challenges of tomorrow.
OMNI is looking for world-class talent ready to tackle challenging projects that will enable our customers to achieve their most demanding technical and operational goals.
We are an equal opportunity employer offering competitive salaries, comprehensive health benefits and equity packages.
