░ ░▒▒▒▓▓█████▌░░ University of OXford & University of camBRiDGE ░░▐████▓▓▒▒▒░ ░
▄▄██▓▄ ▐███▌ ████▐███████▓▄ █████████▄ ▐███▌██████▓▄▄ ▄▄▓████▓ ▐████████
▄████████████ ▐███▌▐███▌▀████▌████▌ ▀███▓ ▀▀▀ ███▓▀▀████ ▄▓███▀ ▐███▓▀▀▀
▐███▀ ▀███▀███▓▄███▀ ▐███ ▄███▀▐███▓ ▄████▀▐███▌███▓ ███▓████ ▓███▌
███▌ ▐██▌ ▀████▀ ▓███████▄▄▐████████▓▄ ▐███▓███▓ ▐██████▌ ▀█████▓██████▓
████▄ ▄███▄▄███▀███▓ ████ ▀███▓███▓ ▀████▌████▐███▌ ███████▓ ▓██████▌
▐████████▀████▌ ███████▌ ▄███████▌ ████████▓███▌▄▄███▓▀█████▄▄████▓███▄▄▄▄▄
▀▀▓██▀▀ ▐████ ▐███▓████████▓▀████▌ ▐███████████████▓▀▀ ▀▀▓████▀▀░▓███████▌
...is a collective term for characteristics that the two institutions share.
░
█ Agile Security
█
█
█ Published by: Oreilly
█ Apr 2018
▓
▓ Lecture Size: 34x50
▓ Length: +1 hrs
▒ Lecture Date: 10/2018
░
░ Lecture Link: https://www.safaribooksonline.com/
░ https://www.packtpub.com
░
:
| As we move towards architectures designed to cope with changing
| requirements, and eternal services that go live and iterate, how
| can we manage change in a secure way? How can we possibly build
| secure systems in this environment? If you work in a governmental
| or regulated industry, then youÆll already be familiar with the
| hollow promises of accreditation. ThatÆs commonly the thing left
| until the end, about the same time as the testing, and gives rise
| to the concept that security is the team that just says No. What
| if it could be different? What if a service could be continually
| accredited, continually tested against a baseline of security
| tests, and that the team was able to own and manage the risk
| register?
|
| In this lesson, Michael Brunton-Spall walks through how government
| is changing its approach to accreditation, to building secure
| services. He covers things from continuous security testing
| through to living risk registers, team threat assessments, and
| security embracing the entire service design. This clip comes from
| the 2015 Velocity conference in Amsterdam.
,