cdCon2021

Regulated industries like Aerospace and Automotive follow traditional development practices like V cycle with manual testing and low software reusability. Hardware dependencies and long support contracts have led to a huge legacy codebase with siloed software development teams. Regulated software requires compliance to safety standards like DO-178C, ED-12B, MISRA, ISO 26262, and security standards like DO-326A, ED-202A, SAE J3061, etc. While the DevSecOps emerged from Internet and software companies, it can be used in other industries. This session will cover how incorporating DevSecOps in regulated Industries can optimize software development and reduce security risks. Moreover, it reduces the time from code change to production deployment or release. Rigorous, automated security testing can also validate compliance requirements.