<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Background on Learnable Secure SDLC</title><link>https://sdlc.learnable.team/background/</link><description>Recent content in Background on Learnable Secure SDLC</description><generator>Hugo</generator><language>en-us</language><atom:link href="https://sdlc.learnable.team/background/index.xml" rel="self" type="application/rss+xml"/><item><title>Why do you need a process?</title><link>https://sdlc.learnable.team/background/why/</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><guid>https://sdlc.learnable.team/background/why/</guid><description>Who needs to define a software process? # Regulated software companies like banks, fintechs, healthcare providers, medical device manufacturers, etc. need to comply with government legislation and/or industry standards (IEC 62304, ISO26262, NIST, FDA, etc.) before they can take products to market and sell to customers.
Many non-regulated companies also choose to opt-in to standards like SOC2 and ISO27001 to win the confidence of their customers.
To achieve compliance with any of these regulations and standards involves defining a software delivery process, implementing it, and then proving that the process is being followed.</description></item><item><title>DevOps Compliance Culture</title><link>https://sdlc.learnable.team/background/devops/</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><guid>https://sdlc.learnable.team/background/devops/</guid><description>DevOps Compliance Culture # TLDR: DevOps teams who understand and conform to process with automation support outperform teams with external approvals and compliance managers.
The way we build and deliver software has changed significantly over the years. In the past, we would build systems on large, custom managed hardware. Organizations were siloed by specialty, with different departments for analysis, development, quality assurance, and operations. Software was delivered in releases, once a year, or once a quarter even.</description></item></channel></rss>