Education & Prevention through App Security- Root Cause Analysis in DevSecOps - ERP Spain.com - España y América Latina

Root cause analysis (RCA) is a systematic process for identifying “root causes” of problems or events and an approach for responding to them. Not just “putting out fires” for problems that develop, but finding a way to prevent them. The SAP Product Security team wanted to ensure that mistakes were not being repeated in the Secure Software Development Lifecycle and that there was a systematic process that helped to ensure this. Providing a systematic way to dive deeper into resolved issues in a collaborative manner ensured that all stakeholder perspectives (such as development, validation, testing and response), methodologies and tools were taken into consideration. Key Takeaways: - Trace the path of a bug from hacker to fix and feed it back into the SDLC, and all the communication that happened along the way - Get a first-person look into best practices and successes when organizations bring the learnings from external security reports back in the DevSecOps cycle - Concrete outcomes and lessons learned from this initiative