{"id":6515,"date":"2019-09-24T14:27:58","date_gmt":"2019-09-24T13:27:58","guid":{"rendered":"https:\/\/ee.yelkdev.site\/?p=6515"},"modified":"2024-03-28T12:25:50","modified_gmt":"2024-03-28T12:25:50","slug":"introducing-the-secure-delivery-playbook","status":"publish","type":"post","link":"https:\/\/www.equalexperts.com\/blog\/our-thinking\/introducing-the-secure-delivery-playbook\/","title":{"rendered":"Introducing the Secure Delivery Playbook"},"content":{"rendered":"

One of the challenges our industry faces is how to move fast without breaking things. To help address that, we\u2019re open-sourcing our Secure Delivery Playbook<\/a>, which explains how we approach security within continuous delivery.<\/p>\n

A couple of years ago, Dan Mitchell, our Operability Practice Lead, wrote about how DevOps is a constraint<\/span><\/a>. At the time, he quoted Thomas (our co-founder) as saying:<\/p>\n

\u201cNot everyone agrees on what DevOps means, who does it, or how it\u2019s done. There are many ways to do it depending on the context. People sometimes forget that DevOps is part of something bigger called Continuous Delivery\u201d<\/i><\/b><\/p>\n

I believe our industry is in a similar position today with DevSecOps. The conference circuits buzz with talks about the latest product or approach that can automate away your troubles. Many teams are looking at how to \u2018shift left\u2019 – a term that has become more about the pipeline than anything else.<\/p>\n

Security is bigger than DevSecOps<\/h3>\n

This creates a challenge for us in helping organisations meaningfully adapt their security processes alongside Continuous Delivery. It\u2019s a challenge because it carries assumptions about what good security looks like, and incorrectly suggests that the focus of security should be on the pipeline. That\u2019s certainly a part of it, but it\u2019s only one chapter in the story.<\/p>\n

Rather than talking about tools, automation and pipelines, we want the conversation to be about how best to explicitly manage risk – and that\u2019s bigger than what most people think of when they hear \u2018DevSecOps\u2019.<\/p>\n

Our view on Secure Delivery<\/h3>\n

To help shape this conversation, we\u2019re announcing the first release of our Secure Delivery Playbook<\/span><\/a>. The playbook explains in detail how we\u2019re able to strike a fair balance between delivering rapidly while maintaining high levels of security.<\/p>\n

The playbook defines a set of principles and practices that Equal Experts recommends for delivery of secure software. It’s not just for software engineers; it is for everyone involved in delivering software. It’s also not prescriptive about how each of the practices should be adopted, but allows you to determine which practices are appropriate for you and the best way to implement them.<\/p>\n\"buildoperateorganise\"\n

The Secure Delivery Playbook is a guide rather than a checklist, helping those with the most context<\/span><\/a> make the right decision.<\/p>\n

Sharing our thinking with the world<\/h3>\n

While the ideas captured within the playbook have originated from within the Equal Experts network, we\u2019d like to see this evolve based on contributions from the wider community. We\u2019d also like others to benefit from our playbook and use it in their own projects. For that reason, we\u2019ve published the playbook under a Creative Commons license and hosted it on GitHub<\/span><\/a> for anyone to contribute, or even fork and modify to suit their context.<\/p>\n

We hope this contribution to the wider software engineering community helps advance our collective capabilities in addressing security throughout software delivery.<\/p>\n

Join us!<\/h3>\n

Do you like how we think about software security? Why not join us<\/span><\/a>! Get in touch if you\u2019re interested\u2026 we\u2019re always looking for talented security professionals.<\/p>\n

 <\/p><\/blockquote>\n","protected":false},"excerpt":{"rendered":"

One of the challenges our industry faces is how to move fast without breaking things. To help address that, we\u2019re open-sourcing our Secure Delivery Playbook, which explains how we approach security within continuous delivery. A couple of years ago, Dan Mitchell, our Operability Practice Lead, wrote about how DevOps is a constraint. At the time, […]<\/p>\n","protected":false},"author":76,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"categories":[5],"tags":[],"location":[397],"class_list":["post-6515","post","type-post","status-publish","format-standard","hentry","category-our-thinking"],"acf":[],"yoast_head":"\nIntroducing the Secure Delivery Playbook | Equal Experts<\/title>\n<meta name=\"description\" content=\"One of the challenges our industry faces is how to move fast without breaking things. To help address that, we\u2019re open-sourcing our Secure Delivery Playbook, which explains how we approach security within continuous delivery.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.equalexperts.com\/blog\/our-thinking\/introducing-the-secure-delivery-playbook\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Introducing the Secure Delivery Playbook\" \/>\n<meta property=\"og:description\" content=\"One of the challenges our industry faces is how to move fast without breaking things. To help address that, we\u2019re open-sourcing our Secure Delivery Playbook, which explains how we approach security within continuous delivery.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.equalexperts.com\/blog\/our-thinking\/introducing-the-secure-delivery-playbook\/\" \/>\n<meta property=\"og:site_name\" content=\"Equal Experts\" \/>\n<meta property=\"article:published_time\" content=\"2019-09-24T13:27:58+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-03-28T12:25:50+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.equalexperts.com\/wp-content\/uploads\/2019\/09\/Secure_Delivery.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1170\" \/>\n\t<meta property=\"og:image:height\" content=\"720\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Stuart Gunter\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"Introducing the Secure Delivery Playbook\" \/>\n<meta name=\"twitter:creator\" content=\"@EqualExperts\" \/>\n<meta name=\"twitter:site\" content=\"@EqualExperts\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Stuart Gunter\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.equalexperts.com\/blog\/our-thinking\/introducing-the-secure-delivery-playbook\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.equalexperts.com\/blog\/our-thinking\/introducing-the-secure-delivery-playbook\/\"},\"author\":{\"name\":\"Stuart Gunter\",\"@id\":\"https:\/\/www.equalexperts.com\/#\/schema\/person\/5a21b96defd660dd42e1692ce9f7ff88\"},\"headline\":\"Introducing the Secure Delivery Playbook\",\"datePublished\":\"2019-09-24T13:27:58+00:00\",\"dateModified\":\"2024-03-28T12:25:50+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.equalexperts.com\/blog\/our-thinking\/introducing-the-secure-delivery-playbook\/\"},\"wordCount\":525,\"publisher\":{\"@id\":\"https:\/\/www.equalexperts.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.equalexperts.com\/blog\/our-thinking\/introducing-the-secure-delivery-playbook\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.equalexperts.com\/wp-content\/uploads\/2019\/09\/buildoperateorganise.png\",\"articleSection\":[\"Our Thinking\"],\"inLanguage\":\"en-GB\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.equalexperts.com\/blog\/our-thinking\/introducing-the-secure-delivery-playbook\/\",\"url\":\"https:\/\/www.equalexperts.com\/blog\/our-thinking\/introducing-the-secure-delivery-playbook\/\",\"name\":\"Introducing the Secure Delivery Playbook | Equal Experts\",\"isPartOf\":{\"@id\":\"https:\/\/www.equalexperts.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.equalexperts.com\/blog\/our-thinking\/introducing-the-secure-delivery-playbook\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.equalexperts.com\/blog\/our-thinking\/introducing-the-secure-delivery-playbook\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.equalexperts.com\/wp-content\/uploads\/2019\/09\/buildoperateorganise.png\",\"datePublished\":\"2019-09-24T13:27:58+00:00\",\"dateModified\":\"2024-03-28T12:25:50+00:00\",\"description\":\"One of the challenges our industry faces is how to move fast without breaking things. To help address that, we\u2019re open-sourcing our Secure Delivery Playbook, which explains how we approach security within continuous delivery.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.equalexperts.com\/blog\/our-thinking\/introducing-the-secure-delivery-playbook\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.equalexperts.com\/blog\/our-thinking\/introducing-the-secure-delivery-playbook\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/www.equalexperts.com\/blog\/our-thinking\/introducing-the-secure-delivery-playbook\/#primaryimage\",\"url\":\"https:\/\/www.equalexperts.com\/wp-content\/uploads\/2019\/09\/buildoperateorganise.png\",\"contentUrl\":\"https:\/\/www.equalexperts.com\/wp-content\/uploads\/2019\/09\/buildoperateorganise.png\",\"width\":1999,\"height\":1093,\"caption\":\"buildoperateorganise\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.equalexperts.com\/blog\/our-thinking\/introducing-the-secure-delivery-playbook\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.equalexperts.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Introducing the Secure Delivery Playbook\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.equalexperts.com\/#website\",\"url\":\"https:\/\/www.equalexperts.com\/\",\"name\":\"Equal Experts\",\"description\":\"Making Software. Better.\",\"publisher\":{\"@id\":\"https:\/\/www.equalexperts.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.equalexperts.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.equalexperts.com\/#organization\",\"name\":\"Equal Experts\",\"url\":\"https:\/\/www.equalexperts.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/www.equalexperts.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.equalexperts.com\/wp-content\/uploads\/2018\/08\/Equal_Experts_Logo_CMYK_Colour.jpg\",\"contentUrl\":\"https:\/\/www.equalexperts.com\/wp-content\/uploads\/2018\/08\/Equal_Experts_Logo_CMYK_Colour.jpg\",\"width\":719,\"height\":340,\"caption\":\"Equal Experts\"},\"image\":{\"@id\":\"https:\/\/www.equalexperts.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/x.com\/EqualExperts\",\"https:\/\/www.linkedin.com\/company\/equal-experts\/?viewAsMember=true\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.equalexperts.com\/#\/schema\/person\/5a21b96defd660dd42e1692ce9f7ff88\",\"name\":\"Stuart Gunter\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/www.equalexperts.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/d595653748eebaf4ac1bf9e2abf7ddb48ce96f3bb5f6d30790d80149119dfe5e?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/d595653748eebaf4ac1bf9e2abf7ddb48ce96f3bb5f6d30790d80149119dfe5e?s=96&d=mm&r=g\",\"caption\":\"Stuart Gunter\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Introducing the Secure Delivery Playbook | Equal Experts","description":"One of the challenges our industry faces is how to move fast without breaking things. To help address that, we\u2019re open-sourcing our Secure Delivery Playbook, which explains how we approach security within continuous delivery.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.equalexperts.com\/blog\/our-thinking\/introducing-the-secure-delivery-playbook\/","og_locale":"en_GB","og_type":"article","og_title":"Introducing the Secure Delivery Playbook","og_description":"One of the challenges our industry faces is how to move fast without breaking things. To help address that, we\u2019re open-sourcing our Secure Delivery Playbook, which explains how we approach security within continuous delivery.","og_url":"https:\/\/www.equalexperts.com\/blog\/our-thinking\/introducing-the-secure-delivery-playbook\/","og_site_name":"Equal Experts","article_published_time":"2019-09-24T13:27:58+00:00","article_modified_time":"2024-03-28T12:25:50+00:00","og_image":[{"width":1170,"height":720,"url":"https:\/\/www.equalexperts.com\/wp-content\/uploads\/2019\/09\/Secure_Delivery.jpg","type":"image\/jpeg"}],"author":"Stuart Gunter","twitter_card":"summary_large_image","twitter_title":"Introducing the Secure Delivery Playbook","twitter_creator":"@EqualExperts","twitter_site":"@EqualExperts","twitter_misc":{"Written by":"Stuart Gunter","Estimated reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.equalexperts.com\/blog\/our-thinking\/introducing-the-secure-delivery-playbook\/#article","isPartOf":{"@id":"https:\/\/www.equalexperts.com\/blog\/our-thinking\/introducing-the-secure-delivery-playbook\/"},"author":{"name":"Stuart Gunter","@id":"https:\/\/www.equalexperts.com\/#\/schema\/person\/5a21b96defd660dd42e1692ce9f7ff88"},"headline":"Introducing the Secure Delivery Playbook","datePublished":"2019-09-24T13:27:58+00:00","dateModified":"2024-03-28T12:25:50+00:00","mainEntityOfPage":{"@id":"https:\/\/www.equalexperts.com\/blog\/our-thinking\/introducing-the-secure-delivery-playbook\/"},"wordCount":525,"publisher":{"@id":"https:\/\/www.equalexperts.com\/#organization"},"image":{"@id":"https:\/\/www.equalexperts.com\/blog\/our-thinking\/introducing-the-secure-delivery-playbook\/#primaryimage"},"thumbnailUrl":"https:\/\/www.equalexperts.com\/wp-content\/uploads\/2019\/09\/buildoperateorganise.png","articleSection":["Our Thinking"],"inLanguage":"en-GB"},{"@type":"WebPage","@id":"https:\/\/www.equalexperts.com\/blog\/our-thinking\/introducing-the-secure-delivery-playbook\/","url":"https:\/\/www.equalexperts.com\/blog\/our-thinking\/introducing-the-secure-delivery-playbook\/","name":"Introducing the Secure Delivery Playbook | Equal Experts","isPartOf":{"@id":"https:\/\/www.equalexperts.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.equalexperts.com\/blog\/our-thinking\/introducing-the-secure-delivery-playbook\/#primaryimage"},"image":{"@id":"https:\/\/www.equalexperts.com\/blog\/our-thinking\/introducing-the-secure-delivery-playbook\/#primaryimage"},"thumbnailUrl":"https:\/\/www.equalexperts.com\/wp-content\/uploads\/2019\/09\/buildoperateorganise.png","datePublished":"2019-09-24T13:27:58+00:00","dateModified":"2024-03-28T12:25:50+00:00","description":"One of the challenges our industry faces is how to move fast without breaking things. To help address that, we\u2019re open-sourcing our Secure Delivery Playbook, which explains how we approach security within continuous delivery.","breadcrumb":{"@id":"https:\/\/www.equalexperts.com\/blog\/our-thinking\/introducing-the-secure-delivery-playbook\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.equalexperts.com\/blog\/our-thinking\/introducing-the-secure-delivery-playbook\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.equalexperts.com\/blog\/our-thinking\/introducing-the-secure-delivery-playbook\/#primaryimage","url":"https:\/\/www.equalexperts.com\/wp-content\/uploads\/2019\/09\/buildoperateorganise.png","contentUrl":"https:\/\/www.equalexperts.com\/wp-content\/uploads\/2019\/09\/buildoperateorganise.png","width":1999,"height":1093,"caption":"buildoperateorganise"},{"@type":"BreadcrumbList","@id":"https:\/\/www.equalexperts.com\/blog\/our-thinking\/introducing-the-secure-delivery-playbook\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.equalexperts.com\/"},{"@type":"ListItem","position":2,"name":"Introducing the Secure Delivery Playbook"}]},{"@type":"WebSite","@id":"https:\/\/www.equalexperts.com\/#website","url":"https:\/\/www.equalexperts.com\/","name":"Equal Experts","description":"Making Software. Better.","publisher":{"@id":"https:\/\/www.equalexperts.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.equalexperts.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/www.equalexperts.com\/#organization","name":"Equal Experts","url":"https:\/\/www.equalexperts.com\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.equalexperts.com\/#\/schema\/logo\/image\/","url":"https:\/\/www.equalexperts.com\/wp-content\/uploads\/2018\/08\/Equal_Experts_Logo_CMYK_Colour.jpg","contentUrl":"https:\/\/www.equalexperts.com\/wp-content\/uploads\/2018\/08\/Equal_Experts_Logo_CMYK_Colour.jpg","width":719,"height":340,"caption":"Equal Experts"},"image":{"@id":"https:\/\/www.equalexperts.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/EqualExperts","https:\/\/www.linkedin.com\/company\/equal-experts\/?viewAsMember=true"]},{"@type":"Person","@id":"https:\/\/www.equalexperts.com\/#\/schema\/person\/5a21b96defd660dd42e1692ce9f7ff88","name":"Stuart Gunter","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.equalexperts.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/d595653748eebaf4ac1bf9e2abf7ddb48ce96f3bb5f6d30790d80149119dfe5e?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/d595653748eebaf4ac1bf9e2abf7ddb48ce96f3bb5f6d30790d80149119dfe5e?s=96&d=mm&r=g","caption":"Stuart Gunter"}}]}},"_links":{"self":[{"href":"https:\/\/www.equalexperts.com\/wp-json\/wp\/v2\/posts\/6515","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.equalexperts.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.equalexperts.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.equalexperts.com\/wp-json\/wp\/v2\/users\/76"}],"replies":[{"embeddable":true,"href":"https:\/\/www.equalexperts.com\/wp-json\/wp\/v2\/comments?post=6515"}],"version-history":[{"count":0,"href":"https:\/\/www.equalexperts.com\/wp-json\/wp\/v2\/posts\/6515\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.equalexperts.com\/wp-json\/wp\/v2\/media?parent=6515"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.equalexperts.com\/wp-json\/wp\/v2\/categories?post=6515"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.equalexperts.com\/wp-json\/wp\/v2\/tags?post=6515"},{"taxonomy":"location","embeddable":true,"href":"https:\/\/www.equalexperts.com\/wp-json\/wp\/v2\/location?post=6515"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}