Feed on
Posts
Comments

Monthly Archive for February, 2020

Notes from Rome

I have just spent a week in Rome at a Microsoft training on security architecture. Good food, good company and, believe it or not, a lot of good discussions on the difference between architecture and engineering. One discussion stuck with me. A colleague asked why so many customers have excellent engineers but still end up […]

Read Full Post »

In my first Zero Trust posts last year I wrote that you can never trust any data and that all principles of the Secure Development Lifecycle must be followed. Let me go a bit deeper on that. The classic SDL is about building software without vulnerabilities: training, threat modelling, code review, static analysis, testing and […]

Read Full Post »