Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision | |||
| public:99_annexes:annex-b-terms-and-definitions:d:devsecops [2026/09/12 17:42] – ↷ Page moved from private:99_annexes:annex-b-terms-and-definitions:d:devsecops to public:99_annexes:annex-b-terms-and-definitions:d:devsecops nick_dido | public:99_annexes:annex-b-terms-and-definitions:d:devsecops [2026/09/12 17:43] (current) – ↷ Links adapted because of a move operation nick_dido | ||
|---|---|---|---|
| Line 1: | Line 1: | ||
| ====== Development, | ====== Development, | ||
| - | [[private: | + | [[public: |
| ===== Discussion ===== | ===== Discussion ===== | ||
| - | Development, | + | Development, |
| DevSecOps treats security as a continuous lifecycle responsibility rather than as a separate review performed only after development or immediately before deployment. | DevSecOps treats security as a continuous lifecycle responsibility rather than as a separate review performed only after development or immediately before deployment. | ||
| Line 60: | Line 60: | ||
| The term **DevSecOps** combines **Development**, | The term **DevSecOps** combines **Development**, | ||
| - | DevSecOps extends [[private: | + | DevSecOps extends [[public: |
| - | DevSecOps does not mean that every security decision is fully automated. Responsible actors retain responsibility for activities such as risk acceptance, Security Control assessment, and [[private: | + | DevSecOps does not mean that every security decision is fully automated. Responsible actors retain responsibility for activities such as risk acceptance, Security Control assessment, and [[public: |
| A CI/CD Pipeline can implement DevSecOps activities, but the existence of a pipeline alone does not establish DevSecOps. The workflow must integrate security activities, results, responsibilities, | A CI/CD Pipeline can implement DevSecOps activities, but the existence of a pipeline alone does not establish DevSecOps. The workflow must integrate security activities, results, responsibilities, | ||