Security DevOps (DevSecOps) Assessment

Phase 1: Shift-Left Security Assessment

1. Evaluate pre-commit security practices
   • Pre-commit hooks for secret detection
   • IDE security plugins/linters
   • Secure coding guidelines published
   • Security training for developers (annual)
   • Threat modeling in design phase
   • Security champions program in dev teams
2. Score: 1 (No shift-left) to 5 (Security embedded in design)

Security in Development Lifecycle