You're listening to the CyberWire X, a series of specials where we highlight important security topics

affecting security professionals worldwide.

I'm Rick Howard, the chief security officer, chief analyst, and senior fellow at the

CyberWire.

In today's episode is titled DevSek Ops and SecCops and Securing the container.

Now we all know that the move to the cloud had great potential to improve security, but the required process and cultural changes can be daunting.

There are a vast number of critical vulnerabilities that make it into production and demand more effective mitigations.

Although shifting security left should help, organizations are not able to achieve this quickly

enough and shifting left does not account for runtime threats.

Organizations must strive to improve the prioritization of vulnerabilities to ensure the most dangerous

flaws are fixed early.

But even then, some risk will be accepted and a threat detection and response program is required for full security coverage.

So on this show we will be discussing how to secure your software development life cycle,

how to use a maturity model like the Building Security and

Maturity model or B-SIM? Where do containers fit in that process and the CISDIG

2022 Cloud Native Security and Usage Report.

A programming note, each CyberWire X Special features two segments.

In the first part of the show, we will hear from industry experts on the topic at hand.

And in the second part, we will hear from our show's

sponsor for their point of view.

And since I brought it up,

here's a word from today's sponsor,

...