In this edition of the Wabbi Wire we’ll highlight key trends in the industry, discuss insights we discovered on integrating security into the SDLC, adoption progress, and persistent bottlenecks hindering efficiency.
WHAT DID WE LEARN?
The Integration Paradox
Despite 100% agreement among respondents regarding the importance of integrating security into the Software Development Life Cycle (SDLC), only 41% currently implement a continuous security strategy. This disparity raises questions about the factors inhibiting widespread adoption. Interestingly, 94% of respondents report encountering bottlenecks in their current application security processes, indicating a critical need for organizations to prioritize the implementation of a continuous security strategy.
Learn more about the Paradox in the Report:
Cracking the Code >
Put the Info back into InfoSec
A staggering 86% of organizations voice their struggles in accessing accurate and pertinent application security information. Top challenges include confirming if a feature aligns with security policies (48%), obtaining approval for production release (44%), and ensuring code complies with security requirements for compilation (42%). Notably, a significant gap emerges between security and development teams, with security scans topping concerns for 69% of security teams and 88% of dedicated DevSecOps professionals. This data underscores the critical need for improved collaboration and streamlined processes between these vital teams.
Understand the causes of AppSec Bottlenecks
in the CS Library >
Progress Progress Progress
Although there remains ample opportunity for enhancement, there has been a notable shift from the previous year to the current one. The proportion of organizations with a continuous security strategy in place has surged from 12% to 41%, demonstrating significant progress. Additionally, there has been an uptick in the frequency of integrating security processes into the SDLC from the outset. This progress may be attributed to various factors, such as Development teams feeling more empowered, experiencing a 16% increase compared to the previous year, or the rising adoption of automation in DevOps and Security processes.
Discuss the Progress and the Challenges That Remain at our Wabbinar >
JOIN THE CONVERSATION
COFFEE & CONTINUOUS SECURITY
Phil Lawrence, CTO of Wabbi, sits down for an exclusive closed group discussion on the findings in this year’s State of Continuous Security.
WHAT’S YOUR ASPM PERSPECTIVE
Check out Wabbi’s series “ASPerspectives” to to learn how key stakeholders utilize ASPM to achieve cyber-resilience & business outcomes.