{"id":3738,"date":"2023-09-07T10:56:41","date_gmt":"2023-09-07T08:56:41","guid":{"rendered":"https:\/\/rock-the-prototype.com\/?p=3738"},"modified":"2023-09-07T14:01:59","modified_gmt":"2023-09-07T12:01:59","slug":"it-security-bridging-the-gap-between-software-development-and-it-security-teams","status":"publish","type":"post","link":"https:\/\/rock-the-prototype.com\/en\/it-security\/it-security-bridging-the-gap-between-software-development-and-it-security-teams\/","title":{"rendered":"IT Security: Bridging the Gap Between Software Development and IT-Security Teams"},"content":{"rendered":"<p><\/p><div class=\"fusion-fullwidth fullwidth-box fusion-builder-row-1 fusion-flex-container nonhundred-percent-fullwidth non-hundred-percent-height-scrolling\" style=\"--awb-border-radius-top-left:0px;--awb-border-radius-top-right:0px;--awb-border-radius-bottom-right:0px;--awb-border-radius-bottom-left:0px;--awb-flex-wrap:wrap;\"><div class=\"fusion-builder-row fusion-row fusion-flex-align-items-flex-start fusion-flex-content-wrap\" style=\"max-width:1144px;margin-left: calc(-4% \/ 2 );margin-right: calc(-4% \/ 2 );\"><div class=\"fusion-layout-column fusion_builder_column fusion-builder-column-0 fusion_builder_column_1_1 1_1 fusion-flex-column\" style=\"--awb-bg-size:cover;--awb-width-large:100%;--awb-margin-top-large:0px;--awb-spacing-right-large:1.92%;--awb-margin-bottom-large:0px;--awb-spacing-left-large:1.92%;--awb-width-medium:100%;--awb-spacing-right-medium:1.92%;--awb-spacing-left-medium:1.92%;--awb-width-small:100%;--awb-spacing-right-small:1.92%;--awb-spacing-left-small:1.92%;\"><div class=\"fusion-column-wrapper fusion-flex-justify-content-flex-start fusion-content-layout-column\"><div class=\"fusion-text fusion-text-1\"><p><strong>Welcome to our in-depth article on IT security in the realm of software development. The importance of securing your software cannot be overstated, especially when digital transformation is happening at an unprecedented scale, courtesy of <a href=\"https:\/\/rock-the-prototype.com\/en\/cloud-computing-cloud-technology\/cloud\/\" target=\"_blank\" title=\"What is cloud? Cloud or cloud computing moves data and programs from desktop PCs or servers in a company to remote cloud servers. Cloud storage therefore consists of a standard server network in a cloud data center or distributed across several cloud server locations.\" class=\"encyclopedia\">cloud<\/a> technologies and containerization. Today, we&rsquo;re synthesizing the invaluable insights from Vladyslav Cherednychenko, the Head of IT Security Engineering at <a href=\"https:\/\/www.aboutyou.de\/\" target=\"_blank\" rel=\"noopener\">About You<\/a>, one of Europe&rsquo;s largest Fashion eCommerce platforms.<\/strong><\/p>\n<h3>IT-Security Insights &ndash;&nbsp;Why You Should Read This Article:<\/h3>\n<p><strong>Comprehensive Understanding of the Importance of IT Security in Software Development:<\/strong><\/p>\n<ul>\n<li>Our it security article delves deep into the necessity of integrating IT Security measures right from the inception of the software development cycle. This section equips you with the knowledge of why it&rsquo;s crucial to consider security as an integral part of software design.<\/li>\n<\/ul>\n<p><strong>eCommerce Expert Opinions:<\/strong><\/p>\n<ul>\n<li>Gain valuable insights from our Rock the Prototype podcast interview and real case information featuring IT Security and Software Development experts. Firsthand experience and advice provide a well-rounded understanding of the topic.<\/li>\n<\/ul>\n<p><strong>Actionable Steps for Implementation:<\/strong><\/p>\n<ul>\n<li>Don&rsquo;t just learn about the &ldquo;what&rdquo; and &ldquo;why&rdquo;; we guide you through the &ldquo;how&rdquo;. Our article includes practical steps for incorporating IT Security into your software development processes.<\/li>\n<\/ul>\n<p><strong>Cutting-Edge Trends and Technologies:<\/strong><\/p>\n<ul>\n<li>Stay updated on the latest advancements in IT Security that could revolutionize how security is implemented in software development. Understanding these trends could give you a competitive edge.<\/li>\n<\/ul>\n<p><strong>Common Pitfalls and How to Avoid Them:<\/strong><\/p>\n<ul>\n<li>Learn about the mistakes that organizations commonly make when it comes to integrating IT Security into software development, and gain practical tips on how to avoid them.<\/li>\n<\/ul>\n<p><strong>Legal and Compliance Relevance:<\/strong><\/p>\n<ul>\n<li>Beyond just the technicalities, we also discuss the legal implications of not incorporating IT Security into software development, helping you understand the potential risks and liabilities.<\/li>\n<\/ul>\n<p><strong>Benefits to Business and ROI:<\/strong><\/p>\n<ul>\n<li>Understand how a secure development approach not only protects the organization but can also offer a competitive advantage and improve customer trust.<\/li>\n<\/ul>\n<p>Whether you&rsquo;re a software developer, an IT Security professional, or a business decision-maker, this article offers a comprehensive look into why and how IT Security should be an inseparable part of software development. Given the rising threats in the digital world, can you afford not to read it?<\/p>\n\n<h2><\/h2>\n<\/div><\/div><\/div><\/div><\/div><div class=\"fusion-fullwidth fullwidth-box fusion-builder-row-2 fusion-flex-container has-pattern-background has-mask-background nonhundred-percent-fullwidth non-hundred-percent-height-scrolling\" style=\"--awb-border-radius-top-left:0px;--awb-border-radius-top-right:0px;--awb-border-radius-bottom-right:0px;--awb-border-radius-bottom-left:0px;--awb-flex-wrap:wrap;\"><div class=\"fusion-builder-row fusion-row fusion-flex-align-items-flex-start fusion-flex-content-wrap\" style=\"max-width:1144px;margin-left: calc(-4% \/ 2 );margin-right: calc(-4% \/ 2 );\"><div class=\"fusion-layout-column fusion_builder_column fusion-builder-column-1 fusion_builder_column_1_2 1_2 fusion-flex-column\" style=\"--awb-bg-size:cover;--awb-width-large:50%;--awb-margin-top-large:0px;--awb-spacing-right-large:3.84%;--awb-margin-bottom-large:0px;--awb-spacing-left-large:3.84%;--awb-width-medium:100%;--awb-order-medium:0;--awb-spacing-right-medium:1.92%;--awb-spacing-left-medium:1.92%;--awb-width-small:100%;--awb-order-small:0;--awb-spacing-right-small:1.92%;--awb-spacing-left-small:1.92%;\"><div class=\"fusion-column-wrapper fusion-column-has-shadow fusion-flex-justify-content-flex-start fusion-content-layout-column\"><div class=\"fusion-text fusion-text-2\"><h3><span class=\"ez-toc-section\" id=\"About_the_Expert\"><\/span>About the Expert<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Vladyslav&rsquo;s journey into the world of IT security began in Ukraine, where he earned his bachelor&rsquo;s degree in data protection and security.<\/p>\n<p>Initially starting as a DevOps engineer, he transitioned into cybersecurity, eventually completing his masters in the field.<\/p>\n<p>With over five years of experience at About You, he climbed the ranks to become the Head of Information Security Engineering.<\/p>\n<\/div><div class=\"fusion-text fusion-text-3\"><h3><span class=\"ez-toc-section\" id=\"About_You_More_Than_Just_an_eCommerce_Platform\"><\/span>About You: More Than Just an eCommerce Platform<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>About You isn&rsquo;t just a retail destination; it has a dual business model. Aside from its retail wing, the company has a Software as a Service (SaaS) business model called &lsquo;Scale,&rsquo; where it offers its backend infrastructure to other eCommerce platforms. With an expertise in handling high-load systems and providing a stable eCommerce experience, About You has already acquired several customers for this service.<\/p>\n<h2><\/h2>\n<\/div><\/div><\/div><div class=\"fusion-layout-column fusion_builder_column fusion-builder-column-2 fusion_builder_column_1_2 1_2 fusion-flex-column\" style=\"--awb-bg-size:cover;--awb-width-large:50%;--awb-margin-top-large:0px;--awb-spacing-right-large:3.84%;--awb-margin-bottom-large:0px;--awb-spacing-left-large:3.84%;--awb-width-medium:100%;--awb-order-medium:0;--awb-spacing-right-medium:1.92%;--awb-spacing-left-medium:1.92%;--awb-width-small:100%;--awb-order-small:0;--awb-spacing-right-small:1.92%;--awb-spacing-left-small:1.92%;\"><div class=\"fusion-column-wrapper fusion-column-has-shadow fusion-flex-justify-content-flex-start fusion-content-layout-column\"><div class=\"fusion-image-element\" style=\"--awb-caption-title-font-family:var(--h2_typography-font-family);--awb-caption-title-font-weight:var(--h2_typography-font-weight);--awb-caption-title-font-style:var(--h2_typography-font-style);--awb-caption-title-size:var(--h2_typography-font-size);--awb-caption-title-transform:var(--h2_typography-text-transform);--awb-caption-title-line-height:var(--h2_typography-line-height);--awb-caption-title-letter-spacing:var(--h2_typography-letter-spacing);\"><span class=\" fusion-imageframe imageframe-none imageframe-1 hover-type-none\"><img decoding=\"async\" width=\"768\" height=\"1024\" alt=\"Vladyslav Cherednychenko - Head of IT Security Engineering at About You\" title=\"Vladyslav Cherednychenko &ndash; Head of IT Security Engineering at About You\" src=\"https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/09\/Portrait_Vladyslav-Cherednychenko-768x1024.jpeg\" class=\"img-responsive wp-image-3739\" srcset=\"https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/09\/Portrait_Vladyslav-Cherednychenko-200x267.jpeg 200w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/09\/Portrait_Vladyslav-Cherednychenko-400x533.jpeg 400w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/09\/Portrait_Vladyslav-Cherednychenko-600x800.jpeg 600w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/09\/Portrait_Vladyslav-Cherednychenko-800x1067.jpeg 800w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/09\/Portrait_Vladyslav-Cherednychenko-1200x1600.jpeg 1200w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/09\/Portrait_Vladyslav-Cherednychenko-scaled.jpeg 1920w\" sizes=\"(max-width: 1024px) 100vw, (max-width: 640px) 100vw, 600px\"><\/span><\/div><\/div><\/div><\/div><\/div><div class=\"fusion-fullwidth fullwidth-box fusion-builder-row-3 fusion-flex-container nonhundred-percent-fullwidth non-hundred-percent-height-scrolling\" style=\"--awb-border-radius-top-left:0px;--awb-border-radius-top-right:0px;--awb-border-radius-bottom-right:0px;--awb-border-radius-bottom-left:0px;--awb-flex-wrap:wrap;\"><div class=\"fusion-builder-row fusion-row fusion-flex-align-items-flex-start fusion-flex-content-wrap\" style=\"max-width:1144px;margin-left: calc(-4% \/ 2 );margin-right: calc(-4% \/ 2 );\"><div class=\"fusion-layout-column fusion_builder_column fusion-builder-column-3 fusion_builder_column_1_1 1_1 fusion-flex-column\" style=\"--awb-bg-size:cover;--awb-width-large:100%;--awb-margin-top-large:0px;--awb-spacing-right-large:1.92%;--awb-margin-bottom-large:0px;--awb-spacing-left-large:1.92%;--awb-width-medium:100%;--awb-spacing-right-medium:1.92%;--awb-spacing-left-medium:1.92%;--awb-width-small:100%;--awb-spacing-right-small:1.92%;--awb-spacing-left-small:1.92%;\"><div class=\"fusion-column-wrapper fusion-flex-justify-content-flex-start fusion-content-layout-column\"><div class=\"fusion-text fusion-text-4\"><h2><span class=\"ez-toc-section\" id=\"Why_is_IT_Security_Critical\"><\/span>Why is IT Security Critical?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<h3><span class=\"ez-toc-section\" id=\"The_Rising_Threat_Landscape\"><\/span>The Rising Threat Landscape<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Cybersecurity has never been more vital. In recent years, the rate of cyberattacks, particularly <a href=\"https:\/\/rock-the-prototype.com\/en\/it-security\/ransomware\/\" target=\"_blank\" title=\"Ransomware is therefore blackmail software, also known as an encryption Trojan. Ransomware is one of the most dangerous cyber attacks and is currently widespread. Ransomware is therefore blackmail software, also known as an encryption Trojan, which encrypts data or blocks access rights to directories, files and applications on attacked servers and computers. A ransom, typically in a cryptocurrency, is demanded for decryption. What is the most effective way to protect ourselves against ransomware attacks? Find out more now...\" class=\"encyclopedia\">ransomware<\/a> attacks, has escalated exponentially. Organisation and companies across all industries are at an increasing risk of becoming victims, paying hefty ransoms and facing reputational damage.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Regulatory_Concerns_and_Client_Demands\"><\/span>Regulatory Concerns and Client Demands<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>European governments are also tightening the screws, with regulations like GDPR coming into play. Moreover, in the B2B landscape, clients are demanding proof of robust security policies and certifications before establishing business relations.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"The_Cost_Factor\"><\/span>The Cost Factor<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Contrary to popular belief, investing in a dedicated IT security team is far less costly in the long run than facing the aftermath of a cyberattack. About You itself has been proactive about investing in IT security since its early days. While pentesting is a effective method it is a must to raise internal awareness of IT Security topics in any organization and to ensure internal IT Security professionals and to embed it security practices in any team.<\/p>\n<\/div><a class=\"fusion-modal-text-link\" data-toggle=\"modal\" data-target=\".fusion-modal.Podcast Episode 8 - Rock the Prototype Podcast: IT Security in Software Development with Vladyslav Cherednychenko\" href=\"#\"><iframe class=\"lazyload\" style=\"border-radius: 12px;\" src=\"data:image\/svg+xml,%3Csvg%20xmlns%3D%27http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%27%20width%3D%27100%27%20height%3D%27352%27%20viewBox%3D%270%200%20100%20352%27%3E%3Crect%20width%3D%27100%27%20height%3D%27352%27%20fill-opacity%3D%220%22%2F%3E%3C%2Fsvg%3E\" data-orig-src=\"https:\/\/open.spotify.com\/embed\/episode\/3N5fbURvWubB8SJreJU5A5?utm_source=generator\" width=\"100%\" height=\"352\" frameborder=\"0\" allowfullscreen=\"allowfullscreen\"><\/iframe><\/a><div class=\"fusion-text fusion-text-5\" style=\"--awb-margin-top:20px;\"><h2><span class=\"ez-toc-section\" id=\"How_About_You_Handles_IT_Security_A_Structured_Approach\"><\/span>How About You Handles IT Security: A Structured Approach<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<h3><span class=\"ez-toc-section\" id=\"IT_Security_Team_Composition\"><\/span>IT Security Team Composition<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>The company has a centralized IT security team comprising around 10 experts, with plans to expand further. This team is organized into four key circles:<\/p>\n<ol>\n<li><strong>Application Security<\/strong>: This circle is responsible for internal penetration testing and code reviews. They assist other development teams in writing secure code.<\/li>\n<li><strong>DevSecOps<\/strong>: This circle integrates security into the development processes. They employ tools that ensure both the applications and infrastructure remain secure.<\/li>\n<li><strong>Governance, Risk, and Compliance (GRC)<\/strong>: This circle ensures that the company meets all the external compliance requirements. They are regularly involved in audits and communicate the company&rsquo;s security posture to potential B2B clients.<\/li>\n<li><strong>Incident Response<\/strong>: This circle is specifically tailored to monitor infrastructure for any malicious or unusual activities and to act upon them.<\/li>\n<\/ol>\n<h4><span class=\"ez-toc-section\" id=\"Shared_Responsibilities_for_IT_Security\"><\/span>Shared Responsibilities for IT Security<span class=\"ez-toc-section-end\"><\/span><\/h4>\n<p>While each circle has its subject matter experts, there are some shared responsibilities, like incident response, to ensure that the entire team can act in case of an emergency.<\/p>\n<p>Overlooking IT security is a perilous mistake that companies can&rsquo;t afford anymore. At the end any organization needs to align their IT strategies to focus on security as a priority, taking a leaf from About You&rsquo;s structured and comprehensive approach to managing IT security at scale.<\/p>\n<p>If you are looking to bolster your IT security, it&rsquo;s not just about having measures in place, but about having a continually evolving strategy to deal with an ever-changing threat landscape. After all, the safety of your company&mdash;and your customers&mdash;depends on it.<\/p>\n<\/div><\/div><\/div><\/div><\/div><div class=\"fusion-fullwidth fullwidth-box fusion-builder-row-4 fusion-flex-container has-pattern-background has-mask-background nonhundred-percent-fullwidth non-hundred-percent-height-scrolling\" style=\"--awb-border-radius-top-left:0px;--awb-border-radius-top-right:0px;--awb-border-radius-bottom-right:0px;--awb-border-radius-bottom-left:0px;--awb-flex-wrap:wrap;\"><div class=\"fusion-builder-row fusion-row fusion-flex-align-items-flex-start fusion-flex-content-wrap\" style=\"max-width:1144px;margin-left: calc(-4% \/ 2 );margin-right: calc(-4% \/ 2 );\"><div class=\"fusion-layout-column fusion_builder_column fusion-builder-column-4 fusion_builder_column_1_1 1_1 fusion-flex-column\" style=\"--awb-bg-size:cover;--awb-width-large:100%;--awb-margin-top-large:0px;--awb-spacing-right-large:1.92%;--awb-margin-bottom-large:0px;--awb-spacing-left-large:1.92%;--awb-width-medium:100%;--awb-order-medium:0;--awb-spacing-right-medium:1.92%;--awb-spacing-left-medium:1.92%;--awb-width-small:100%;--awb-order-small:0;--awb-spacing-right-small:1.92%;--awb-spacing-left-small:1.92%;\"><div class=\"fusion-column-wrapper fusion-column-has-shadow fusion-flex-justify-content-flex-start fusion-content-layout-column\"><div class=\"fusion-text fusion-text-6\"><h2><span class=\"ez-toc-section\" id=\"The_Importance_of_IT_Security_in_the_Software_Landscape\"><\/span>The Importance of IT Security in the Software Landscape<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>The cyber threat landscape is constantly evolving, with the number of cyberattacks, especially ransomware, reaching new highs year after year. As the potential costs associated with cybersecurity incidents continue to skyrocket, About You has invested heavily in&nbsp; security from its early days. This is not just to comply with regulatory requirements like GDPR but also to meet the security demands of B2B clients and safeguard the company&rsquo;s reputation.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"IT-Security_within_the_organizational_Structure_Units_and_Circles\"><\/span>IT-Security within the organizational Structure: Units and Circles<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>At About You, the IT security team is organized into &lsquo;Units&rsquo; and &lsquo;Circles.&rsquo; With over 300 developers across more than 20 software development teams, About You employs a centralized security unit, subdivided into four specialized circles:<\/p>\n<ol>\n<li><strong>Application Security<\/strong>: Focuses on internal penetration testing, code reviews, and advising development teams on secure coding practices.<\/li>\n<li><strong>SecOps<\/strong>: Integrates security tools and practices into the development processes, helping keep both applications and infrastructure secure.<\/li>\n<li><strong>GRC (Governance, Risk, and Compliance)<\/strong>: Takes care of compliance requirements, external audits, and ensuring that security policies are in place and up-to-date.<\/li>\n<li><strong>Incident Response<\/strong>: Monitors the infrastructure for any malicious or unusual activities and responds to security incidents.<\/li>\n<\/ol>\n<p>The circles work both independently on their projects and collaboratively when needed. Weekly knowledge-sharing sessions, incident response exercises, and quarterly goal-setting meetings are part of the team&rsquo;s routine to maintain effective cross-functional knowledge flow.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"The_IT-Security_Threat_Landscape_in_E-commerce\"><\/span>The IT-Security Threat Landscape in E-commerce<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Two significant types of web-based threats About You encounters are:<\/p>\n<ol>\n<li><strong>Web Scraping<\/strong>: Automated tools that scan the website to collect data like pricing.<\/li>\n<li><strong>Shopping Bots<\/strong>: Sophisticated bots designed to buy exclusive items, often to resell them at higher prices.<\/li>\n<\/ol>\n<p>The challenge lies in differentiating these bots from genuine customer activities without impacting the user experience negatively.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"IT_Security_Challenges_and_Advice\"><\/span>IT Security Challenges and Advice<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<h3><span class=\"ez-toc-section\" id=\"Threat_Detection_and_Mitigation\"><\/span>Threat Detection and Mitigation<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>IT security teams face the challenge of fingerprinting attackers accurately without affecting genuine users. This requires agile and innovative tooling solutions to strike a balance between user experience and security.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Infrastructure_Visibility\"><\/span>Infrastructure Visibility<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>For an organization to defend against threats successfully, complete visibility into its infrastructure is crucial. Vladyslav recommends a multi-tool approach for continuous monitoring, automated by using different tactics from both a defender&rsquo;s and attacker&rsquo;s perspective.<\/p>\n<p>In a fast-paced digital age, IT security in software development is not just an option but a necessity. Strategies for effective threat detection, incident response, and infrastructure visibility are vital for any organization to safeguard its assets and reputation. The ongoing challenge is to balance robust security measures with a seamless user experience, a mission that companies like About You are striving to perfect.<\/p>\n<\/div><div class=\"fusion-text fusion-text-7\"><div id=\"attachment_3752\" style=\"width: 1034px\" class=\"wp-caption alignnone\"><img decoding=\"async\" aria-describedby=\"caption-attachment-3752\" class=\"wp-image-3752 size-large\" src=\"https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/09\/Podcast-Cover-Sascha-Guest_IT-Security-1024x1024.jpg\" alt=\"IT Security strategies, roles and functions in IT Security teams, pentesting and improving software development and protecting IT infrastructure - Rock the Prototype Podcast\" width=\"1024\" height=\"1024\" srcset=\"https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/09\/Podcast-Cover-Sascha-Guest_IT-Security-66x66.jpg 66w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/09\/Podcast-Cover-Sascha-Guest_IT-Security-150x150.jpg 150w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/09\/Podcast-Cover-Sascha-Guest_IT-Security-200x200.jpg 200w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/09\/Podcast-Cover-Sascha-Guest_IT-Security-300x300.jpg 300w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/09\/Podcast-Cover-Sascha-Guest_IT-Security-400x400.jpg 400w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/09\/Podcast-Cover-Sascha-Guest_IT-Security-600x600.jpg 600w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/09\/Podcast-Cover-Sascha-Guest_IT-Security-768x767.jpg 768w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/09\/Podcast-Cover-Sascha-Guest_IT-Security-800x799.jpg 800w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/09\/Podcast-Cover-Sascha-Guest_IT-Security-1024x1024.jpg 1024w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/09\/Podcast-Cover-Sascha-Guest_IT-Security-1200x1199.jpg 1200w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/09\/Podcast-Cover-Sascha-Guest_IT-Security.jpg 1374w\" sizes=\"(max-width: 1024px) 100vw, 1024px\"><p id=\"caption-attachment-3752\" class=\"wp-caption-text\">IT-Security-Strategies, roles and functions in IT-Security-Teams, pentesting and improving software development and protecting IT infrastructure &ndash; Rock the Prototype Podcast: IT Security in Software Development with Vladyslav Cherednychenko<\/p><\/div>\n<h2><span class=\"ez-toc-section\" id=\"Implementing_Robust_IT_Security_Measures_in_Organizations\"><\/span>Implementing Robust IT Security Measures in Organizations<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>In today&rsquo;s fast-paced tech landscape, striking the right balance between innovation and security can be challenging. Here are some insights on how organizations can manage security for their software development without hindering growth.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"IT_Security_by_Default\"><\/span>IT Security by Default<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>&ldquo;Security by Default&rdquo; is an effective approach that allows organizations to maintain speed without sacrificing safety. Instead of building every element from scratch, engineers can utilize secure templates created by the security or operations teams. These templates for things like databases contain built-in security measures, thus saving time and ensuring adherence to security standards.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Continuous_Compliance_Scans\"><\/span>Continuous Compliance Scans<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>One strategy is to continuously scan your infrastructure for non-compliance. Establish what constitutes a &ldquo;secure resource&rdquo; and use automated tools to identify deviations. When a discrepancy is found, the responsible team can promptly correct it. This tactic is particularly beneficial when utilizing Infrastructure as Code (IaC), which helps avoid manual changes and enhances security.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Role_of_Red_and_Blue_Teaming\"><\/span>Role of Red and Blue Teaming<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Conducting &ldquo;red team&rdquo; and &ldquo;blue team&rdquo; exercises within the IT security team allows one group to simulate cyberattacks while the other defends against them. This approach tests the effectiveness of security measures and fosters a security-first mindset within the organization.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"IT-Security_and_the_Human_Factor\"><\/span>IT-Security and the Human Factor<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Often described as the &ldquo;weakest link&rdquo; in cybersecurity, humans can also be the strongest line of defense when properly educated. A rapid scale-up in technology doesn&rsquo;t mean that your security can scale up just as quickly. Investing in training for employees, particularly engineers, can pay off in improved risk mitigation.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Vulnerability_Management\"><\/span>Vulnerability Management<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>It&rsquo;s not just about identifying vulnerabilities; it&rsquo;s about committing to fix them. Organizations should establish clear processes for finding and resolving security flaws. Keeping a balanced ratio between discovered and fixed vulnerabilities each month prevents security risks from accumulating.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Secure_Coding_Guidelines_and_Code_Reviews\"><\/span>Secure Coding Guidelines and Code Reviews<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Maintaining up-to-date secure coding guidelines on an accessible platform like Confluence can make it easier for developers to adhere to security best practices. Moreover, complement these with regular code reviews and white-box penetration tests to ensure that your codebase remains secure.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"IT_Security_Tools_and_Technologies\"><\/span>IT Security Tools and Technologies<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>While the specific tools used may vary and be considered sensitive information, many organizations trust a blend of open-source, commercial, and custom-built solutions. Services like AWS and Cloudflare offer robust security options, which can be used in conjunction with code scanners and other vulnerability management tools.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Recommendations_for_Startups\"><\/span>Recommendations for Startups<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>For companies just starting to focus on IT security, it&rsquo;s crucial not to over-engineer solutions. First, take care of the basics and cover as much ground as possible with minimal time investment. As you identify the most significant threats, then you can invest more resources into specialized solutions.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Shift_Left_Approach\"><\/span>Shift Left Approach<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>The &ldquo;Shift Left&rdquo; approach emphasizes the importance of introducing security measures as early as possible in the development process. Early identification of issues can save enormous amounts of time and money compared to rectifying a fundamental problem after launch.<\/p>\n<p>By incorporating these strategies into your organizational processes, you not only build a more secure infrastructure but also foster a culture of security-awareness that empowers your team to be proactive rather than reactive in dealing with IT security challenges.<\/p>\n<\/div><div class=\"fusion-text fusion-text-8\"><h2><span class=\"ez-toc-section\" id=\"Surprising_Outcomes_of_Neglected_IT_Security\"><\/span>Surprising Outcomes of Neglected IT Security<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>When it comes to IT security, it&rsquo;s all about preventing what you don&rsquo;t see coming. One example from our experience demonstrates this well. In the early stages of developing our scalable product offering, we found significant vulnerabilities during penetration tests. These tests exposed security gaps, especially in identity and access management. Without this testing, we could have unknowingly exposed our clients to severe risks.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Team_Collaboration_in_IT_Security\"><\/span>Team Collaboration in IT Security<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Our team comprises various roles, such as developers, DevOps engineers, platform engineers, and security engineers, among other typical corporate roles like product owners and managers. A majority of the work, including writing and deploying the code, takes place within development teams. Security concerns are addressed by specialized security engineers, but sometimes, barriers exist between the development and security teams. This can be due to a lack of familiarity or prior collaboration.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Effective_Communication_Strategies\"><\/span>Effective Communication Strategies<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>One way to improve this collaborative culture is by establishing routines that encourage interaction between teams. Effective communication doesn&rsquo;t have to be formal; a more personal connection often makes it easier for team members to ask questions or seek advice. This helps the security team establish a reputation for being helpful rather than punitive, thereby fostering better collaboration.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Challenges_and_Opportunities_in_Collaboration\"><\/span>Challenges and Opportunities in Collaboration<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>The primary challenge in collaboration often comes down to a misalignment of priorities. While security engineers might push for immediate fixes to vulnerabilities, it&rsquo;s essential to understand that development teams also have other tasks to focus on. Business needs must be balanced with security requirements. One way to improve this balance is through ongoing engagement from the security team &ndash; not just identifying vulnerabilities but also helping development teams understand and fix them.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"The_Future_of_IT_Security_AI_and_More\"><\/span>The Future of IT Security: AI and More<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>The landscape of IT security is rapidly evolving, with significant developments like the integration of Artificial Intelligence (AI) and centralization of tooling. While AI has been around for a while, it&rsquo;s becoming increasingly important in threat detection and response. However, implementing AI isn&rsquo;t without its challenges. The risks include potential model poisoning, increased alert fatigue due to false positives, and false negatives where the AI model fails to detect real threats.<\/p>\n<p>These are just a few possibilities for increasing your it security level with support of AI. Remember that the human factor&rsquo;s essential. The integration of IT security within the software development process is not just a technical endeavor; it also hinges on the human element. While technology like AI can bolster your security measures, the insights and judgments of a skilled IT security team are invaluable. Learn how to effectively blend technology and human expertise for a secure software development lifecycle.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Implications_for_Software_Development\"><\/span>Implications for Software Development<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>AI also poses both challenges and opportunities for software development. One concern is that AI models, trained on historical data, might propagate past errors or vulnerabilities. But on the flip side, AI can speed up development processes, although it should not replace human judgment.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Conclusion\"><\/span>Conclusion<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>IT Security is not just a necessity but a must-have in today&rsquo;s technology-dependent world. It requires ongoing vigilance and a collaborative approach. Striving for small, incremental improvements in your company&rsquo;s security posture can yield significant benefits in the long run. It&rsquo;s better to advance by 1% every day than to stay stagnant. This incremental progress could make all the difference in your company&rsquo;s future of an secure infrastructure and software landscape.<\/p>\n<\/div><\/div><\/div><\/div><\/div><div class=\"fusion-fullwidth fullwidth-box fusion-builder-row-5 fusion-flex-container has-pattern-background has-mask-background nonhundred-percent-fullwidth non-hundred-percent-height-scrolling\" style=\"--awb-border-radius-top-left:0px;--awb-border-radius-top-right:0px;--awb-border-radius-bottom-right:0px;--awb-border-radius-bottom-left:0px;--awb-flex-wrap:wrap;\"><div class=\"fusion-builder-row fusion-row fusion-flex-align-items-flex-start fusion-flex-content-wrap\" style=\"max-width:1144px;margin-left: calc(-4% \/ 2 );margin-right: calc(-4% \/ 2 );\"><div class=\"fusion-layout-column fusion_builder_column fusion-builder-column-5 fusion_builder_column_1_1 1_1 fusion-flex-column\" style=\"--awb-bg-size:cover;--awb-width-large:100%;--awb-margin-top-large:0px;--awb-spacing-right-large:1.92%;--awb-margin-bottom-large:0px;--awb-spacing-left-large:1.92%;--awb-width-medium:100%;--awb-order-medium:0;--awb-spacing-right-medium:1.92%;--awb-spacing-left-medium:1.92%;--awb-width-small:100%;--awb-order-small:0;--awb-spacing-right-small:1.92%;--awb-spacing-left-small:1.92%;\"><div class=\"fusion-column-wrapper fusion-column-has-shadow fusion-flex-justify-content-flex-start fusion-content-layout-column\"><a class=\"fusion-modal-text-link\" data-toggle=\"modal\" data-target=\".fusion-modal.Rock the Prototype - Software development &amp; Prototyping Podcast iTunes\" href=\"#\"><iframe id=\"embedPlayer\" style=\"width: 100%; max-width: 660px; overflow: hidden; border-radius: 10px; transform: translateZ(0px); animation: 2s ease 0s 6 normal none running loading-indicator; background-color: #e4e4e4;\" src=\"https:\/\/embed.podcasts.apple.com\/us\/podcast\/rock-the-prototype-software-development-prototyping\/id1684835330?itsct=podcast_box_player&amp;itscg=30200&amp;ls=1&amp;theme=auto\" height=\"450px\" frameborder=\"0\" sandbox=\"allow-forms allow-popups allow-same-origin allow-scripts allow-top-navigation-by-user-activation\"><\/iframe><\/a><\/div><\/div><\/div><\/div><div class=\"fusion-fullwidth fullwidth-box fusion-builder-row-6 fusion-flex-container has-pattern-background has-mask-background nonhundred-percent-fullwidth non-hundred-percent-height-scrolling\" style=\"--awb-border-radius-top-left:0px;--awb-border-radius-top-right:0px;--awb-border-radius-bottom-right:0px;--awb-border-radius-bottom-left:0px;--awb-flex-wrap:wrap;\"><div class=\"fusion-builder-row fusion-row fusion-flex-align-items-flex-start fusion-flex-content-wrap\" style=\"max-width:1144px;margin-left: calc(-4% \/ 2 );margin-right: calc(-4% \/ 2 );\"><div class=\"fusion-layout-column fusion_builder_column fusion-builder-column-6 fusion_builder_column_1_3 1_3 fusion-flex-column\" style=\"--awb-bg-size:cover;--awb-width-large:33.333333333333%;--awb-margin-top-large:0px;--awb-spacing-right-large:5.76%;--awb-margin-bottom-large:0px;--awb-spacing-left-large:5.76%;--awb-width-medium:100%;--awb-order-medium:0;--awb-spacing-right-medium:1.92%;--awb-spacing-left-medium:1.92%;--awb-width-small:100%;--awb-order-small:0;--awb-spacing-right-small:1.92%;--awb-spacing-left-small:1.92%;\"><div class=\"fusion-column-wrapper fusion-column-has-shadow fusion-flex-justify-content-flex-start fusion-content-layout-column\"><div class=\"fusion-title title fusion-title-1 fusion-sep-none fusion-title-text fusion-title-size-two\" style=\"--awb-margin-top-small:30px;--awb-margin-right-small:0px;--awb-margin-bottom-small:20px;--awb-margin-left-small:0px;\"><h2 class=\"fusion-title-heading title-heading-left fusion-responsive-typography-calculated\" style=\"margin:0;--fontSize:30;line-height:1.1;\">About the Author:<\/h2><\/div><div class=\"fusion-image-element\" style=\"--awb-caption-title-font-family:var(--h2_typography-font-family);--awb-caption-title-font-weight:var(--h2_typography-font-weight);--awb-caption-title-font-style:var(--h2_typography-font-style);--awb-caption-title-size:var(--h2_typography-font-size);--awb-caption-title-transform:var(--h2_typography-text-transform);--awb-caption-title-line-height:var(--h2_typography-line-height);--awb-caption-title-letter-spacing:var(--h2_typography-letter-spacing);\"><span class=\" fusion-imageframe imageframe-none imageframe-2 hover-type-none\"><img decoding=\"async\" width=\"1920\" height=\"1920\" title=\"Sascha Block &ndash; Rock the Prototype\" src=\"https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2019\/09\/Sascha_Block.jpg\" alt class=\"img-responsive wp-image-3342\" srcset=\"https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2019\/09\/Sascha_Block-200x200.jpg 200w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2019\/09\/Sascha_Block-400x400.jpg 400w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2019\/09\/Sascha_Block-600x600.jpg 600w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2019\/09\/Sascha_Block-800x800.jpg 800w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2019\/09\/Sascha_Block-1200x1200.jpg 1200w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2019\/09\/Sascha_Block.jpg 1920w\" sizes=\"(max-width: 1024px) 100vw, (max-width: 640px) 100vw, 400px\"><\/span><\/div><\/div><\/div><div class=\"fusion-layout-column fusion_builder_column fusion-builder-column-7 fusion_builder_column_2_3 2_3 fusion-flex-column\" style=\"--awb-bg-size:cover;--awb-width-large:66.666666666667%;--awb-margin-top-large:0px;--awb-spacing-right-large:2.88%;--awb-margin-bottom-large:0px;--awb-spacing-left-large:2.88%;--awb-width-medium:100%;--awb-order-medium:0;--awb-spacing-right-medium:1.92%;--awb-spacing-left-medium:1.92%;--awb-width-small:100%;--awb-order-small:0;--awb-spacing-right-small:1.92%;--awb-spacing-left-small:1.92%;\"><div class=\"fusion-column-wrapper fusion-column-has-shadow fusion-flex-justify-content-flex-start fusion-content-layout-column\"><div class=\"fusion-title title fusion-title-2 fusion-sep-none fusion-title-text fusion-title-size-three\" style=\"--awb-margin-top-small:30px;--awb-margin-right-small:0px;--awb-margin-bottom-small:20px;--awb-margin-left-small:0px;\"><h3 class=\"fusion-title-heading title-heading-left fusion-responsive-typography-calculated\" style=\"margin:0;--fontSize:26;line-height:1.2;\">Sascha Block<\/h3><\/div><div class=\"fusion-text fusion-text-9\"><p>I am <a href=\"https:\/\/www.linkedin.com\/in\/sascha-block-5785b9126\/\">Sascha Block<\/a> &ndash; IT architect in Hamburg and the initiator of Rock the Prototype. I want to make <a href=\"https:\/\/rock-the-prototype.com\/en\/prototyping-en\/prototyping\/\" target=\"_blank\" title=\"What is prototyping? Prototyping is both a process and a strategy for realizing ideas as quickly as possible.\" class=\"encyclopedia\">prototyping<\/a> learnable and experiential. With the motivation to prototype ideas and share knowledge around software prototyping, software architecture and <a href=\"https:\/\/rock-the-prototype.com\/en\/learn-programming\/programming\/\" target=\"_blank\" title=\"What is programming? When programming, a programmer creates a software program that can run on a machine. The code is created in one of the formally defined computer languages - which are countless, such as Java, PHP, C++ or C#, Perl and many many more.\" class=\"encyclopedia\">programming<\/a>, I created the format and the open source initiative Rock the Prototype.<\/p>\n<\/div><div><a class=\"fusion-button button-flat fusion-button-default-size button-custom fusion-button-default button-1 fusion-button-default-span fusion-button-default-type\" style=\"--button_accent_color:#ffffff;--button_accent_hover_color:#00ffff;--button_border_hover_color:#4ab4ff;--button_gradient_top_color:var(--awb-color3);--button_gradient_bottom_color:var(--awb-color3);--button_gradient_top_color_hover:var(--awb-color2);--button_gradient_bottom_color_hover:var(--awb-color2);\" target=\"_self\" href=\"https:\/\/rock-the-prototype.com\/en\/it-security\/zero-trust-beyond-vpn-why-the-virtual-private-network-is-in-the-shadow-of-zero-trust\/\"><span class=\"fusion-button-text awb-button__text awb-button__text--default\">Zero Trust &ndash; Beyond VPN: Why the Virtual Private Network is in the Shadow of Zero Trust<\/span><\/a><\/div><div class=\"fusion-separator fusion-full-width-sep\" style=\"align-self: center;margin-left: auto;margin-right: auto;width:100%;\"><\/div><ul style=\"--awb-size:18px;--awb-line-height:30.6px;--awb-icon-width:30.6px;--awb-icon-height:30.6px;--awb-icon-margin:12.6px;--awb-content-margin:43.2px;\" class=\"fusion-checklist fusion-checklist-1 fusion-checklist-default type-icons\"><li class=\"fusion-li-item\" style=\"\"><span class=\"icon-wrapper circle-no\"><i class=\"fusion-li-icon fa-link fas\" aria-hidden=\"true\"><\/i><\/span><div class=\"fusion-li-item-content\">\n<p><a href=\"https:\/\/rock-the-prototype.com\/en\/\">rock-the-prototype.com<\/a><\/p>\n<\/div><\/li><\/ul><\/div><\/div><\/div><\/div>\n","protected":false},"excerpt":{"rendered":"<p>Unlock the Secrets to IT-Security and fortified Software: Discover why IT Security isn&#8217;t just an add-on but a fundamental pillar in software development. From expert insights to actionable steps, our comprehensive guide reveals how to seamlessly integrate security measures for more robust applications. Don&#8217;t let your software be the weakest link &#8211; read on to fortify your code and your business!<\/p>\n","protected":false},"author":1,"featured_media":3749,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_bbp_topic_count":0,"_bbp_reply_count":0,"_bbp_total_topic_count":0,"_bbp_total_reply_count":0,"_bbp_voice_count":0,"_bbp_anonymous_reply_count":0,"_bbp_topic_count_hidden":0,"_bbp_reply_count_hidden":0,"_bbp_forum_subforum_count":0,"footnotes":""},"categories":[1233,1234,1232,1140,1166,1141],"tags":[1236,1257,1254,1235,1333,1334,1327,1328,1332,1243,1248,1331,1329,1330,1245,1239],"class_list":["post-3738","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cryptography","category-it-infrastructure","category-it-security","category-podcast-en","category-software-architecture","category-software-development","tag-confidentiality","tag-data-loss-prevention-en","tag-identity-management-en","tag-it-security-en","tag-it-security-in-software-development-en","tag-it-security-management-en","tag-it-security-methodologies","tag-it-security-en-2","tag-it-security-teams-en","tag-network-security","tag-network-segmentation","tag-penetration-test-en","tag-pentesting-en","tag-pentets-en","tag-remote-work","tag-zero-trust-en"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.2 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>IT Security: Bridging the gap between Software Development &amp; IT-Security Teams<\/title>\n<meta name=\"description\" content=\"IT Security in Software Development \u2705 Why IT Security is integral to Coding \u2705 Maxime Software Safety with IT Security standards \u2705 Learn more!\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/rock-the-prototype.com\/en\/it-security\/it-security-bridging-the-gap-between-software-development-and-it-security-teams\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"IT Security: Bridging the gap between Software Development &amp; IT-Security Teams\" \/>\n<meta property=\"og:description\" content=\"IT Security in Software Development \u2705 Why IT Security is integral to Coding \u2705 Maxime Software Safety with IT Security standards \u2705 Learn more!\" \/>\n<meta property=\"og:url\" content=\"https:\/\/rock-the-prototype.com\/en\/it-security\/it-security-bridging-the-gap-between-software-development-and-it-security-teams\/\" \/>\n<meta property=\"og:site_name\" content=\"Rock the Prototype - Softwareentwicklung &amp; Prototyping\" \/>\n<meta property=\"article:published_time\" content=\"2023-09-07T08:56:41+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-09-07T12:01:59+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/09\/IT-Security-Bridging-the-Gap-Between-Development-and-Security-Teams_rock_the_prototype.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1024\" \/>\n\t<meta property=\"og:image:height\" content=\"833\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Sascha Block\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@rocktheprototyp\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Sascha Block\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"28 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/rock-the-prototype.com\\\/en\\\/it-security\\\/it-security-bridging-the-gap-between-software-development-and-it-security-teams\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/rock-the-prototype.com\\\/en\\\/it-security\\\/it-security-bridging-the-gap-between-software-development-and-it-security-teams\\\/\"},\"author\":{\"name\":\"Sascha Block\",\"@id\":\"https:\\\/\\\/rock-the-prototype.com\\\/en\\\/#\\\/schema\\\/person\\\/fdb2f98edec62327712c2d26d981c081\"},\"headline\":\"IT Security: Bridging the Gap Between Software Development and IT-Security Teams\",\"datePublished\":\"2023-09-07T08:56:41+00:00\",\"dateModified\":\"2023-09-07T12:01:59+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/rock-the-prototype.com\\\/en\\\/it-security\\\/it-security-bridging-the-gap-between-software-development-and-it-security-teams\\\/\"},\"wordCount\":9050,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/rock-the-prototype.com\\\/en\\\/it-security\\\/it-security-bridging-the-gap-between-software-development-and-it-security-teams\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/rock-the-prototype.com\\\/wp-content\\\/uploads\\\/2023\\\/09\\\/IT-Security-Bridging-the-Gap-Between-Development-and-Security-Teams_rock_the_prototype.png\",\"keywords\":[\"Confidentiality\",\"Data Loss Prevention\",\"Identity Management\",\"IT Security\",\"IT Security in Software Development\",\"IT Security Management\",\"IT Security Methodologies\",\"IT-Security\",\"IT-Security-Teams\",\"Network Security\",\"Network segmentation\",\"Penetration Test\",\"Pentesting\",\"Pentets\",\"Remote work\",\"Zero Trust\"],\"articleSection\":[\"Cryptography\",\"IT infrastructure\",\"IT Security\",\"Podcast\",\"Software Architecture\",\"Software development\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/rock-the-prototype.com\\\/en\\\/it-security\\\/it-security-bridging-the-gap-between-software-development-and-it-security-teams\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/rock-the-prototype.com\\\/en\\\/it-security\\\/it-security-bridging-the-gap-between-software-development-and-it-security-teams\\\/\",\"url\":\"https:\\\/\\\/rock-the-prototype.com\\\/en\\\/it-security\\\/it-security-bridging-the-gap-between-software-development-and-it-security-teams\\\/\",\"name\":\"IT Security: Bridging the gap between Software Development & IT-Security Teams\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/rock-the-prototype.com\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/rock-the-prototype.com\\\/en\\\/it-security\\\/it-security-bridging-the-gap-between-software-development-and-it-security-teams\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/rock-the-prototype.com\\\/en\\\/it-security\\\/it-security-bridging-the-gap-between-software-development-and-it-security-teams\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/rock-the-prototype.com\\\/wp-content\\\/uploads\\\/2023\\\/09\\\/IT-Security-Bridging-the-Gap-Between-Development-and-Security-Teams_rock_the_prototype.png\",\"datePublished\":\"2023-09-07T08:56:41+00:00\",\"dateModified\":\"2023-09-07T12:01:59+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/rock-the-prototype.com\\\/en\\\/#\\\/schema\\\/person\\\/fdb2f98edec62327712c2d26d981c081\"},\"description\":\"IT Security in Software Development \u2705 Why IT Security is integral to Coding \u2705 Maxime Software Safety with IT Security standards \u2705 Learn more!\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/rock-the-prototype.com\\\/en\\\/it-security\\\/it-security-bridging-the-gap-between-software-development-and-it-security-teams\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/rock-the-prototype.com\\\/en\\\/it-security\\\/it-security-bridging-the-gap-between-software-development-and-it-security-teams\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/rock-the-prototype.com\\\/en\\\/it-security\\\/it-security-bridging-the-gap-between-software-development-and-it-security-teams\\\/#primaryimage\",\"url\":\"https:\\\/\\\/rock-the-prototype.com\\\/wp-content\\\/uploads\\\/2023\\\/09\\\/IT-Security-Bridging-the-Gap-Between-Development-and-Security-Teams_rock_the_prototype.png\",\"contentUrl\":\"https:\\\/\\\/rock-the-prototype.com\\\/wp-content\\\/uploads\\\/2023\\\/09\\\/IT-Security-Bridging-the-Gap-Between-Development-and-Security-Teams_rock_the_prototype.png\",\"width\":1024,\"height\":833,\"caption\":\"IT Security - Bridging the gap between Software development and IT Security Teams - Rock the prototype\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/rock-the-prototype.com\\\/en\\\/it-security\\\/it-security-bridging-the-gap-between-software-development-and-it-security-teams\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Startseite\",\"item\":\"https:\\\/\\\/rock-the-prototype.com\\\/en\\\/rock-the-prototype\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"IT Security: Bridging the Gap Between Software Development and IT-Security Teams\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/rock-the-prototype.com\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/rock-the-prototype.com\\\/en\\\/\",\"name\":\"Rock the Prototype - Softwareentwicklung &amp; Prototyping\",\"description\":\"Prototyping: Software Prototypen, Software entwickeln &amp; Programmieren im Team\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/rock-the-prototype.com\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/rock-the-prototype.com\\\/en\\\/#\\\/schema\\\/person\\\/fdb2f98edec62327712c2d26d981c081\",\"name\":\"Sascha Block\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/967c419542686b085600443beafb2e55ad1ef6532a0ad9b96d244cb24fd8c117?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/967c419542686b085600443beafb2e55ad1ef6532a0ad9b96d244cb24fd8c117?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/967c419542686b085600443beafb2e55ad1ef6532a0ad9b96d244cb24fd8c117?s=96&d=mm&r=g\",\"caption\":\"Sascha Block\"},\"description\":\"Ich bin Sascha Block \u2013 IT-Architekt in Hamburg und der Initiator von Rock the Prototype. Ich m\u00f6chte Prototyping erlernbar und erfahrbar machen. Mit der Motivation Ideen prototypisch zu verwirklichen und Wissen rund um Software-Prototyping, Softwarearchitektur und Softwareentwicklung zu teilen, habe ich das Format und die Open-Source Initiative Rock the Prototype geschaffen.\",\"sameAs\":[\"https:\\\/\\\/rock-the-prototype.com\",\"https:\\\/\\\/www.instagram.com\\\/rock_the_prototype\\\/\",\"https:\\\/\\\/x.com\\\/rocktheprototyp\",\"https:\\\/\\\/www.youtube.com\\\/@Rock-the-Prototype\\\/\"],\"url\":\"https:\\\/\\\/rock-the-prototype.com\\\/en\\\/author\\\/administrator-2\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"IT Security: Bridging the gap between Software Development & IT-Security Teams","description":"IT Security in Software Development \u2705 Why IT Security is integral to Coding \u2705 Maxime Software Safety with IT Security standards \u2705 Learn more!","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/rock-the-prototype.com\/en\/it-security\/it-security-bridging-the-gap-between-software-development-and-it-security-teams\/","og_locale":"en_US","og_type":"article","og_title":"IT Security: Bridging the gap between Software Development & IT-Security Teams","og_description":"IT Security in Software Development \u2705 Why IT Security is integral to Coding \u2705 Maxime Software Safety with IT Security standards \u2705 Learn more!","og_url":"https:\/\/rock-the-prototype.com\/en\/it-security\/it-security-bridging-the-gap-between-software-development-and-it-security-teams\/","og_site_name":"Rock the Prototype - Softwareentwicklung &amp; Prototyping","article_published_time":"2023-09-07T08:56:41+00:00","article_modified_time":"2023-09-07T12:01:59+00:00","og_image":[{"width":1024,"height":833,"url":"https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/09\/IT-Security-Bridging-the-Gap-Between-Development-and-Security-Teams_rock_the_prototype.png","type":"image\/png"}],"author":"Sascha Block","twitter_card":"summary_large_image","twitter_creator":"@rocktheprototyp","twitter_misc":{"Written by":"Sascha Block","Est. reading time":"28 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/rock-the-prototype.com\/en\/it-security\/it-security-bridging-the-gap-between-software-development-and-it-security-teams\/#article","isPartOf":{"@id":"https:\/\/rock-the-prototype.com\/en\/it-security\/it-security-bridging-the-gap-between-software-development-and-it-security-teams\/"},"author":{"name":"Sascha Block","@id":"https:\/\/rock-the-prototype.com\/en\/#\/schema\/person\/fdb2f98edec62327712c2d26d981c081"},"headline":"IT Security: Bridging the Gap Between Software Development and IT-Security Teams","datePublished":"2023-09-07T08:56:41+00:00","dateModified":"2023-09-07T12:01:59+00:00","mainEntityOfPage":{"@id":"https:\/\/rock-the-prototype.com\/en\/it-security\/it-security-bridging-the-gap-between-software-development-and-it-security-teams\/"},"wordCount":9050,"commentCount":0,"image":{"@id":"https:\/\/rock-the-prototype.com\/en\/it-security\/it-security-bridging-the-gap-between-software-development-and-it-security-teams\/#primaryimage"},"thumbnailUrl":"https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/09\/IT-Security-Bridging-the-Gap-Between-Development-and-Security-Teams_rock_the_prototype.png","keywords":["Confidentiality","Data Loss Prevention","Identity Management","IT Security","IT Security in Software Development","IT Security Management","IT Security Methodologies","IT-Security","IT-Security-Teams","Network Security","Network segmentation","Penetration Test","Pentesting","Pentets","Remote work","Zero Trust"],"articleSection":["Cryptography","IT infrastructure","IT Security","Podcast","Software Architecture","Software development"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/rock-the-prototype.com\/en\/it-security\/it-security-bridging-the-gap-between-software-development-and-it-security-teams\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/rock-the-prototype.com\/en\/it-security\/it-security-bridging-the-gap-between-software-development-and-it-security-teams\/","url":"https:\/\/rock-the-prototype.com\/en\/it-security\/it-security-bridging-the-gap-between-software-development-and-it-security-teams\/","name":"IT Security: Bridging the gap between Software Development & IT-Security Teams","isPartOf":{"@id":"https:\/\/rock-the-prototype.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/rock-the-prototype.com\/en\/it-security\/it-security-bridging-the-gap-between-software-development-and-it-security-teams\/#primaryimage"},"image":{"@id":"https:\/\/rock-the-prototype.com\/en\/it-security\/it-security-bridging-the-gap-between-software-development-and-it-security-teams\/#primaryimage"},"thumbnailUrl":"https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/09\/IT-Security-Bridging-the-Gap-Between-Development-and-Security-Teams_rock_the_prototype.png","datePublished":"2023-09-07T08:56:41+00:00","dateModified":"2023-09-07T12:01:59+00:00","author":{"@id":"https:\/\/rock-the-prototype.com\/en\/#\/schema\/person\/fdb2f98edec62327712c2d26d981c081"},"description":"IT Security in Software Development \u2705 Why IT Security is integral to Coding \u2705 Maxime Software Safety with IT Security standards \u2705 Learn more!","breadcrumb":{"@id":"https:\/\/rock-the-prototype.com\/en\/it-security\/it-security-bridging-the-gap-between-software-development-and-it-security-teams\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/rock-the-prototype.com\/en\/it-security\/it-security-bridging-the-gap-between-software-development-and-it-security-teams\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/rock-the-prototype.com\/en\/it-security\/it-security-bridging-the-gap-between-software-development-and-it-security-teams\/#primaryimage","url":"https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/09\/IT-Security-Bridging-the-Gap-Between-Development-and-Security-Teams_rock_the_prototype.png","contentUrl":"https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/09\/IT-Security-Bridging-the-Gap-Between-Development-and-Security-Teams_rock_the_prototype.png","width":1024,"height":833,"caption":"IT Security - Bridging the gap between Software development and IT Security Teams - Rock the prototype"},{"@type":"BreadcrumbList","@id":"https:\/\/rock-the-prototype.com\/en\/it-security\/it-security-bridging-the-gap-between-software-development-and-it-security-teams\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Startseite","item":"https:\/\/rock-the-prototype.com\/en\/rock-the-prototype\/"},{"@type":"ListItem","position":2,"name":"IT Security: Bridging the Gap Between Software Development and IT-Security Teams"}]},{"@type":"WebSite","@id":"https:\/\/rock-the-prototype.com\/en\/#website","url":"https:\/\/rock-the-prototype.com\/en\/","name":"Rock the Prototype - Softwareentwicklung &amp; Prototyping","description":"Prototyping: Software Prototypen, Software entwickeln &amp; Programmieren im Team","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/rock-the-prototype.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/rock-the-prototype.com\/en\/#\/schema\/person\/fdb2f98edec62327712c2d26d981c081","name":"Sascha Block","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/967c419542686b085600443beafb2e55ad1ef6532a0ad9b96d244cb24fd8c117?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/967c419542686b085600443beafb2e55ad1ef6532a0ad9b96d244cb24fd8c117?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/967c419542686b085600443beafb2e55ad1ef6532a0ad9b96d244cb24fd8c117?s=96&d=mm&r=g","caption":"Sascha Block"},"description":"Ich bin Sascha Block \u2013 IT-Architekt in Hamburg und der Initiator von Rock the Prototype. Ich m\u00f6chte Prototyping erlernbar und erfahrbar machen. Mit der Motivation Ideen prototypisch zu verwirklichen und Wissen rund um Software-Prototyping, Softwarearchitektur und Softwareentwicklung zu teilen, habe ich das Format und die Open-Source Initiative Rock the Prototype geschaffen.","sameAs":["https:\/\/rock-the-prototype.com","https:\/\/www.instagram.com\/rock_the_prototype\/","https:\/\/x.com\/rocktheprototyp","https:\/\/www.youtube.com\/@Rock-the-Prototype\/"],"url":"https:\/\/rock-the-prototype.com\/en\/author\/administrator-2\/"}]}},"_links":{"self":[{"href":"https:\/\/rock-the-prototype.com\/en\/wp-json\/wp\/v2\/posts\/3738","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/rock-the-prototype.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/rock-the-prototype.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/rock-the-prototype.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/rock-the-prototype.com\/en\/wp-json\/wp\/v2\/comments?post=3738"}],"version-history":[{"count":12,"href":"https:\/\/rock-the-prototype.com\/en\/wp-json\/wp\/v2\/posts\/3738\/revisions"}],"predecessor-version":[{"id":3756,"href":"https:\/\/rock-the-prototype.com\/en\/wp-json\/wp\/v2\/posts\/3738\/revisions\/3756"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/rock-the-prototype.com\/en\/wp-json\/wp\/v2\/media\/3749"}],"wp:attachment":[{"href":"https:\/\/rock-the-prototype.com\/en\/wp-json\/wp\/v2\/media?parent=3738"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/rock-the-prototype.com\/en\/wp-json\/wp\/v2\/categories?post=3738"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/rock-the-prototype.com\/en\/wp-json\/wp\/v2\/tags?post=3738"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}