With the rapid growth of DevOps, DevSecOps is also gaining attention from organizations, and how to integrate security into DevOps has become an issue for many organizations.

This session will share the core concepts and key technologies of DevSecOps, and explore the issues, challenges, and opportunities that may be faced in implementing DevSecOps from different perspectives, including people, process, technology, and culture.

In the era of digitalization, many enterprises have practiced "agile" thinking and actions. This is a signal that needs to face different risks at the same time and is constantly being verified. More and more consumers, regulators, and markets have discovered that the cost of a data leakage caused by this is high and unacceptable. Many data breaches can be prevented in advance. Through the promotion of the concept of DevSecOps and the assistance of automation systems, these problems and risks would be effectively reduced, and the security and quality of the output can be ensured. In fact, it is not so difficult to implement DevSecOps. Daniel will talk about the key points when implementing DevSecOps and how to achieve this goal efficiently and beneficially.

In SDLC and DevOps, security never been the requirement and only presented in Add-on or features. However, when we coming from DevOps to DevSecOps, what is the mandatory from cyber security dimension to achieve DevSecOps? When we achieve DevSecOps, how we could go to the compliance? That's a good question