1. Executive Office of Technology Services and Security
Topic –
DevSecOps…..an Emerging Agile Best Practice
June 13th 2018

2. Agenda – 06/13/2018 Topic Presenter Time Welcome Note Sean Aulson
10: 00 am – 10:15 am
Opening Remarks
Dennis McDermitt
10:15 am – 10: 30 am
Speaker Presentations:
DevSecOps ….. an Emerging Agile Best Practice!
Mark Horvath
10:30 am – 11:30 am
Open Discussion
All
11:30 am – Noon

3. Gartner Acknowledgement
Dana Garofolo
Sr. Account Executive
Gartner - Public Sector
6-7 yrs. relationship with Commonwealth of Massachusetts
Past resource for Prior PM Connect speakers

4. Mark Horvath
As an Analyst specializing in Secure Application Development, Mark Horvath helps clients understand how to improve the overall software development process to minimize security issues in production. This can range from guidance on process and testing to specific tools, tests and services that can make a significant difference in the overall attack surface and security of the end product.
Before joining Gartner, Mr. Horvath worked as an Executive Director for Identity and Access Management at Morgan Stanley, as the lead for Windows Security Assurance for Windows 7 at Microsoft, and as a consultant with various security development projects, mostly in financial services and insurance.
Years of Experience
2 years in total with Gartner
27 years in IT industry
17 years in Banking, Finance and Insurance industry
22 years in Technology & Telecommunications industry

5. Mark Horvath Common Inquiries I Address:
How do I add security to my DevOps methodology?
How do I get security into my development organization without it derailing existing projects?
What are the characteristics of successful, mature security programs?
What are the best practices for the successful deployment of a secure development program?
What should I be asking my vendors about their security programs?
What are the best tools for a secure software development program of my size?
How do I evaluate the security practices of my outsource developers?
What do I need to do about Quantum Computing or Quantum Encryption?
How can I use a Security Champions program to drive better developer security outcomes?
How can I get developers more involved in security?

6. Open Discussion

7. Wrap up and next steps Mailbox
Next PM Connect meeting (Tentative) late Fall
PDU/SEU Reporting
Upcoming Survey
Session info will be PM Connect Wiki link -
Mailbox