The Security Lifecycle and DevSecOps — BCS Foundation Certificate in Information Security Management Principles

The official BCS documentation our The Security Lifecycle and DevSecOps practice questions are cited to. Review the primary sources, then practise.

Official references for this objective

Bcs — E-Security for the Tester | BCS

All too often the flaws in the security have been built in at the requirements and design stages and so prove very difficult to eradicate
Bcs — Universal Service Fabrics will unleash developer innovation while being secure-by-design - DevSecOps Specialist Group | BCS

removes the need for VPNs and MPLS by building-in multi-layer security by design (Zero Trust, App-Micro-segmentation, Software-Defined-Perimeter etc)
Bcs — Hybrid: AI Assisted Coding vs Security: Can Spec Driven Dev Help DevSecOps Win? | BCS

introduce the spec driven development as an evolving approach and explore how this might provide an opportunity to include security non functional into the “specification”
Bcs — Hybrid: Building security into our CI/CD pipeline | BCS

We bake security into our build and deploy process to ensure a secure software lifecycle.