DevSecOps in the Real World: Closing the Gap Between AppSec, DevSec, and CorpSec

About the Session

DevSecOps sounds simple in theory — shift security left, build it into the pipeline. In practice, AppSec, DevSec, and CorpSec teams operate with different tools, different threat models, and different definitions of 'secure enough.' Dr. Smith draws on real-world experience to address the vocabulary, workflow, and accountability gaps between teams building pipelines and those managing enterprise risk. This session focuses on what security leaders wish developers knew — and vice versa — with actionable takeaways for each group.

KEY TAKEAWAYS

Why DevSecOps initiatives stall — and the organizational dynamics behind the technical gaps

How developer access patterns silently create privilege escalation paths across the enterprise

Secrets management as a shared discipline: why hardcoded credentials are still endemic

Aligning AppSec, DevSec, and CorpSec around a common access governance model

A practical maturity framework for converging security accountability across all three teams

Meet the Speakers

Derek A. Smith

Founder, National Cybersecurity Education Center

Derek A. Smith is an expert at cybersecurity, cyber forensics, healthcare IT, SCADA security, physical security, investigations, organizational leadership and training. He is currently an IT Supervisor at the Internal Revenue Service. He is also owner of The Intercessors Investigative and Training Group (www.theintercessorgroup.com). Formerly, Derek worked for several IT companies including Computer Sciences Corporation and Booz Allen Hamilton. Derek spent 18 years as a special agent for various government agencies and the military. He is also a cyber security professor at the University of Maryland, University College and Virginia University of Science and Technology and has taught for over 25 years. Derek is retired from the US Army and also served in the US Navy, and Air Force for a total of 24 years. He is completing his Doctorate Degree in Organizational Leadership and has completed an MBA, MS in IT Information Assurance, Masters in IT Project Management, and a BS in Education. Derek has written several books including Cybersense: The Leaders Guide to Protecting Critical Information, and its companion workbook, and he has contributed to several other books as an author and technical adviser.

David van Heerden

Sr Product Marketing Manager

David van Heerden, A general nerd, metalhead, and wannabe film snob, has worked in IT for over 10 years, sharpening his technical skills and developing a knack for turning complex IT and security concepts into clear value oriented topics. At BeyondTr ... read more