DevSecOps Metrics and Continuous Improvement

Join Tim Chase, the Global Field CISO at Orca Security, as he explores the integration of DevSecOps metrics for continuous improvement, emphasizing the need for a harmonized approach between development, security, and operations. Tim explains how to measure security performance using metrics like vulnerability detection rates and time-to-remediation, and how automation strengthens feedback loops for greater efficiency.

Along the way, Tim explores frameworks like DORA, SANS, and the NIST Cybersecurity Framework, reviewing practical strategies for integrating them into DevOps pipelines. With a focus on fostering collaboration and data-driven decision-making, this course shows how security metrics can guide remediation priorities, improve stakeholder communication, and optimize resource allocation—embedding security throughout the software development lifecycle.

Learning objectives
Identify and implement metrics that can be used to define success for DevSecOps
Explain key principles of data-driven decision-making in DevSecOps.
Develop strategies to prioritize remediation in DevSecOps using metrics.
Explain continuous improvement and why it is critical within DevSecOps.