In episode 154 of Cybersecurity Where You Are, Sean Atkinson discusses incident response in DevSecOps, exploring challenges and solutions in modern software development. He emphasizes the importance of integrating security into development processes and speaks about common issues like alert fatigue and software supply chain vulnerabilities. Here are some highlights from our episode:<ul><li>01:32. Common challenges with modern software development</li><li>03:54. High-speed and continuous deployment</li><li>07:08. Incident correlation with cloud deployment strategies</li><li>10:00. Software supply chain vulnerabilities</li><li>12:45. Alert fatigue and false positives</li><li>14:30. Testing and automation as enablers of real-time anomaly detection</li><li>17:40. The responsibility of incident responders to understand what they see</li><li>18:58. Automated control and a projectized approach to implementing zero trust</li><li>21:26. Oversight and governance with artificial intelligence and machine learning</li><li>23:24. Continuous improvement and early detection</li><li>28:08. Continuous monitoring and logging, automation, and incident response drills</li><li>30:03. Moving down a path of helping incident responders become culturally aware</li></ul>Resources<ul><li><a rel="noreferrer noopener" target="_blank" href="https://www.cisecurity.org/insights/white-papers/cloud-security-and-the-shared-responsibility-model?utm_source=wistia&utm_campaign=hardened_images&utm_medium=audio&utm_term=theme_csm&utm_content=2025-hardened_images-podcast_154-wistia-content_dl">Cloud Security and the Shared Responsibility Model</a></li><li><a rel="noreferrer noopener" target="_blank" href="https://www.cisecurity.org/insights/white-papers/cis-software-supply-chain-security-guide?utm_source=wistia&utm_campaign=benchmarks&utm_medium=audio&utm_term=theme_csm&utm_content=2025-benchmarks-podcast_154-wistia-content_dl">CIS Software Supply Chain Security Guide</a></li><li><a rel="noreferrer noopener" target="_blank" href="https://www.cisecurity.org/insights/white-papers/an-introduction-to-artificial-intelligence?utm_source=wistia&utm_campaign=controls&utm_medium=audio&utm_term=theme_rcs&utm_content=2025-controls-podcast_154-wistia-controls_dl">An Introduction to Artificial Intelligence</a></li><li><a rel="noreferrer noopener" target="_blank" href="https://www.cisecurity.org/insights/blog/defense-in-depth-a-necessary-approach-to-cloud-security?utm_source=wistia&utm_campaign=hardened_images&utm_medium=audio&utm_term=theme_csm&utm_content=2025-hardened_images-podcast_154-wistia-blog_post">Defense-in-Depth: A Necessary Approach to Cloud Security</a></li><li><a rel="noreferrer noopener" target="_blank" href="https://www.cisecurity.org/insights/podcast/episode-63-building-capability-and-integration-with-sboms?utm_source=wistia&utm_campaign=cis&utm_medium=audio&utm_term=theme_tl&utm_content=2025-cis-podcast_154-wistia-podcast_sub">Episode 63: Building Capability and Integration with SBOMs</a></li><li><a rel="noreferrer noopener" target="_blank" href="https://www.cisecurity.org/insights/podcast/episode-44-a-zero-trust-framework-knows-no-end?utm_source=wistia&utm_campaign=cis&utm_medium=audio&utm_term=theme_tl&utm_content=2025-cis-podcast_154-wistia-podcast_sub">Episode 44: A Zero Trust Framework Knows No End</a></li><li><a rel="noreferrer noopener" target="_blank" href="https://www.cisecurity.org/insights/white-papers/leveraging-generative-artificial-intelligence-for-tabletop-exercise-development?utm_source=wistia&utm_campaign=msisac&utm_medium=audio&utm_term=theme_tl&utm_content=2025-msisac-podcast_154-wistia-content_dl">Leveraging Generative Artificial Intelligence for Tabletop Exercise Development</a></li></ul>If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing&nbsp;<a rel="noreferrer noopener" target="_blank" href="mailto:podcast@cisecurity.org">podcast@cisecurity.org</a>.

Podurama

Home

Trending

Personal

Your Podcasts

New Episodes

My Files

Favourite Episodes

Tags (Folders)

Recently Played

Bookmarks

Followed Playlists

Episode 154: Integration of Incident Response into DevSecOps

Cybersecurity Where You Are (video)

AI Chapters

AI Insights

Reviews