Software Security: Industry Influencers   /     Curtis Yanko - Methodologies for Measuring the Cost of Software Defects

Description

"There are ways through automation, design and testing techniques where we can take what is traditionally a three to six to nine week testing cycle and shrink it into minutes or hours." -- Curtis Yanko In November of 2013, I was able to catch up with Curtis Yanko, Architectural manager for CIGNA in Hartford, CT. Our discussion is on the cost curve of fixing defects in the application life cycle and alternatives to current methodologies. "Most companies waste somewhere between 30% and 40% of their productivity on rework." -- Curtis Yanko Highlights of the Discussion 00:25 - Analyzing the cost curve of fixing defects 01:45 - The difficulty of proving the cost of fixing a defect 03:15 - The lack of alternatives to current methodologies 04:45 - Some alternatives to current methodologies 06:05 - Managing the security handoff process 07:07 - Real world story on integrating security and developers 13:05 - A wake up call to corporate America 15:40 - Documenting a process based upon real world experience "It's a fast pace world. Disruption can come from anywhere, and even if it's not disruption, it could be just be very profound change. Your ability to respond and act to that is key to stay in the game over the long haul." -- Curtis Yanko About Curtis Yanko, Architecture Manager - Clinical IT / DevOps, Cigna experience in improving process and developer productivity that deliver superior and trusted applications to drive competitive differentiation. Curtis has built his career by helping large enterprises modernize their application development and delivery by architecting and implementing DevSecOps processes that ensure trust and collaboration between development, QA, IT Ops, Legal and Security teams. He is a leading advocate for IT transformation through teaching these different enterprise silos how to partner for success.

Summary

"There are ways through automation, design and testing techniques where we can take what is traditionally a three to six to nine week testing cycle and shrink it into minutes or hours." -- Curtis Yanko In November of 2013, I was able to catch up with Curtis Yanko, Architectural manager for CIGNA in Hartford, CT. Our discussion is on the cost curve of fixing defects in the application life cycle and alternatives to current methodologies. "Most companies waste somewhere between 30% and 40% of their productivity on rework." -- Curtis Yanko Highlights of the Discussion 00:25 - Analyzing the cost curve of fixing defects 01:45 - The difficulty of proving the cost of fixing a defect 03:15 - The lack of alternatives to current methodologies 04:45 - Some alternatives to current methodologies 06:05 - Managing the security handoff process 07:07 - Real world story on integrating security and developers 13:05 - A wake up call to corporate America 15:40 - Documenting a process based upon real world experience "It's a fast pace world. Disruption can come from anywhere, and even if it's not disruption, it could be just be very profound change. Your ability to respond and act to that is key to stay in the game over the long haul." -- Curtis Yanko About Curtis Yanko, Architecture Manager - Clinical IT / DevOps, Cigna experience in improving process and developer productivity that deliver superior and trusted applications to drive competitive differentiation. Curtis has built his career by helping large enterprises modernize their application development and delivery by architecting and implementing DevSecOps processes that ensure trust and collaboration between development, QA, IT Ops, Legal and Security teams. He is a leading advocate for IT transformation through teaching these different enterprise silos how to partner for success.

Subtitle
"There are ways through automation, design and te…
Duration
00:18:30
Publishing date
2013-11-06 16:17
Link
https://soundcloud.com/trustedsoftwarealliance/curtis-yanko-methodologies-for
Contributors
  Mark Miller, Trusted Software Alliance
author  
Enclosures
http://feeds.soundcloud.com/stream/118849041-trustedsoftwarealliance-curtis-yanko-methodologies-for.mp3
audio/mpeg