Secure Agile and DevOps – speed to market without compromising controls

Registration is now open!

Through the use of an Agile software development methodology, requirements and solutions evolve through collaboration among self-organizing, cross-functional teams. In order to help streamline the development process from concept to delivery, organizations have begun a secondary shift in methodology from Agile towards a DevOps model, which is considered a natural evolution of the Agile movement. The primary focus of DevOps is on building, testing, and releasing software rapidly, frequently, and reliably. By automating as many aspects of the software development life cycle as possible, including key controls such as approvals, testing and deployment tasks, DevOps teams are able to deploy working code on a continuous basis in a compliant manner. KPMG will discuss what this shift in methodology means to your compliance requirements and audit approaches, and will share perspective on how leading organizations embracing Agile and DevOps have successfully build robust control programs into their adoption of Agile and DevOps.

Speaker Bios:

Max Hanson is a director in KPMG’s Emerging Technologies practice 10+ years of broad and diversified technical experience conducting IT assessments, specifically focused around emerging technology risk. Max has worked with clients across a variety of industries to help establish cloud and mobile strategies, governance models, as well as information security, privacy and compliance related functions and capabilities. He is a leader in the Emerging Technology Risk service network driving risk related services for Mobile, Internet of Things (IoT), and secure Agile in the United States and was the author of KPMG’s Mobile Device Security and Governance (MDSG) methodology and a contributor to KPMG’s Enterprise Mobility Framework (KEMF).

Nina Currigan is a partner in KPMG’s Technology Assurance practice, which focuses on providing IT audit, system implementation assessments, and Service & Organization Control (SOC) readiness and reporting services to clients across all industries. Included within Nina’s client base are several organizations who are either currently transitioning to or using Agile/DevOps software development methodologies. Nina has experience leading teams in developing audit programs for these types of methodologies through balanced, risk-based approaches.

past_event