https://jamesgaryjardine.com/tags/sdlc/Recent content in Sdlc on James JardineHugo -- gohugo.ioenWed, 09 Sep 2015 20:09:58 +0000https://jamesgaryjardine.com/versioning-the-sdlc-to-indicate-security-level/Wed, 09 Sep 2015 20:09:58 +0000https://jamesgaryjardine.com/versioning-the-sdlc-to-indicate-security-level/<p>I recently saw a tweet that mentioned how trending SecDevOps is becoming. For those that don’t know, that is the “secure” devops, or shall I say devops with security injected. It really got me thinking about not only devops, but also the Software Development Life Cycle (SDLC). We keep saying security can’t be bolted on and that it needs to be built in, yet we keep bolting it on.</p>https://jamesgaryjardine.com/qa-and-security-pt-2-software-testers/Wed, 10 Sep 2014 13:57:09 +0000https://jamesgaryjardine.com/qa-and-security-pt-2-software-testers/<p>Lets start by discussing the type of QA that tests software to ensure it is working as designed. These are the bug finders of the QA world. The process starts by a developer creating some functional code and then deploying it to an environment specific to the QA team. The QA team then uses its knowledge of how the application is supposed to function and determines if it is performing properly. Any bugs identified get filed and sent back for remediation (hopefully).</p>