Category: Security, Data, artificial-intelligence

To clear up this confusion, the Synopsys Building Security In Maturity Model (BSIMM) is introducing a new term to optimize security testing in a DevOps lifecycle: “shift everywhere.” The term “shift left,” which originated roughly 15 years ago, was almost immediately misunderstood to mean implementing security testing earlier in the SDLC.

Shift left” was always meant to mean performing security testing as early as possible in each stage of the SDLC.

Shifting security testing to the left in the software delivery chain enables organizations to manage security issues early and often, as part of the pipeline, and mitigating the risks associated with defects being discovered in production.

This results in quick identification and remediation of production vulnerabilities throughout the development workflow, from build to production to operations.

Related Articles