Our customers consistently tell us that one of the most exciting features of SD Elements is the capacity to integrate security and compliance requirements with leading Application Lifecycle Management (ALM) tools like Atlassian’s JIRA. The process is simple:
1. A project manager (PM) or security architect create an application in SD Elements and answer the questionnaire
2. The PM or architect sets up integration with JIRA
3. Developers accept and close the security requirements, just like any other ticket
4. SD Elements detects when the tickets are closed in JIRA and marks the tasks as DONE in SD Elements
5. A scanning tool or human tester validates that the requirements have been met. Alternatively, developers build test scripts to automatically validate the requirement.
Security practitioners can see that security has been added in, and developers use JIRA or any of the other supported ALM tools without disrupting their current process. Another important benefit is that once connected, the development team can get a continuous stream of new security and compliance requirements embedded right into JIRA. This works particularly well with agile and continuous integration environments where up-front planning for security requirements isn’t readily available. This narrated video illustrates that integration in action. Interested in giving it a shot for yourself? Contact us to learn more.
About the Guest Blogger:
Chris Tyson, has recently joined Security Compass as our Customer Success Engineer.
Most recently he was a Senior Sales Engineer at Klocwork. Klocwork’s tools find exploitable security defects, code quality issues, architecture and metrics issues in software. Previous to that Chris has extensive customer facing experience in Pre-Sales Engineering, Training, Consulting, Customer Support, Software Development and management of software development teams. He is passionate about security, software quality and user experience. Chris has a Bachelor’s Degree in Computing and Information Science with a minor in Business Administration from the University of Guelph.