Events

Security can no longer be treated as a final checkpoint before release. As software delivery accelerates, organisations need to embed security throughout the development lifecycle, identifying and addressing risks before they become costly vulnerabilities. In this session, we’ll explore how a modern DevSecOps approach helps teams deliver secure, reliable software at speed by shifting security “left” into the design, development, and delivery process. We’ll look at the practices, tooling, and automation that enable security to become an integral part of engineering rather than an obstacle to delivery. Using real-world examples and demonstrations from Azure DevOps and GitHub, we’ll show how organisations can improve code quality, reduce risk, strengthen compliance, and empower developers to take ownership of security from the very beginning. Key topics include: • What “Shift Left” security means and why it matters • Reducing risk and cost by finding issues earlier in the lifecycle • Core DevSecOps practices, including source control, pull request reviews, CI/CD and artefact management • Embedding security scanning and compliance checks into delivery pipelines • Leveraging security capabilities within Azure DevOps and GitHub • The growing role of AI in code quality, security analysis and developer productivity • Practical steps for adopting modern DevSecOps practices within your organisation

This session will leave you with a clear understanding of how to make security a continuous part of software engineering, rather than a costly exercise carried out too late in the process.

Presented by Richard Fennell; Black Marble co-founder and Chief Technology Officer, and Microsoft MVP for Developer Technologies.