Dear reader,
Owing to the aggravated travel conditions caused by the latest Middle East conflict, our prospective speaker for 5th May, Mark Collins-Cope, is unable to give his talk as planned.
I’m on the lookout for an alternative presenter, but if I do not find one by the end of this week I think we may have to cancel.
Meanwhile, please read the notice below as it seems very relevant to Software Practice.
Best regards,
Immo
BCS DevSecOps Event – Thursday 30th April 2026 – AI Assisted Coding vs Security: Can Spec Driven Dev Help DevSecOps Win?
I am very pleased to announce that the next event for the British Computer Society DevSecOps group will take place on Thursday 30th April 2026 at 6:00 p.m. for 6:30 p.m. We look forward to seeing you in person or online. This event will be in person at the BCS HQ in London and online via Zoom.
We will be a looking at the challenges of securing applications developed using AI coding tools and how spec driven development methods may help.
Please use the following link to reserve your space: https://devsecops30042026.eventbrite.co.uk
Synopsis
As AI assisted coding becomes a routine part of modern software delivery, it is transforming not only how developers write code but also how organisations must think about securing it. This talk examines the tension between rapid, AI accelerated development and the growing difficulty of ensuring that security requirements are consistently met when code is generated through “vibe coding” and other emergent AI driven practices.
We will begin by exploring how traditional application security tooling (especially static analysis) can support AI augmented workflows and look at some of the challengers. The talk will the introduce the spec driven development as an evolving approach and explore how this might provide an opportunity to include security non-functional into the “specification”. We will look at some of the different approaches to spec driven development and several current tools that help implement these methods.
The session will conclude with a short case study to explore the potential impact of including security NFRs in a specification. The aim is to provide a realistic, tool agnostic model that can be developed and to start an ongoing dialogue on this topic. We will also ask the question “Can agents be trained in security?” as an introduction to the topic of “agent skills”.
Agenda
This is a hybrid event, with attendance in person at the BCS HQ in London and online via Zoom.
18:00 - Tea, coffee and networking
18:30 - Main presentation – Roy Harrow
19:30 - Q&A followed by light refreshments for those attending in person
20:30 – Close
For more information on the BCS DevSecOps group, including recordings of our previous events, please see our website at:
https://www.bcs.org/membership-and-registrations/member-communities/devsecops-specialist-group/
Join the BCS using this 20% discount code BCSDEVSO20 at https://bcs.org/join
Please contact me if you have any suggestions for topics or speakers for even ts, or if you would like to give a short presentation yourself.
Roy Harrow
Chair of the DevSecOps group
chairde...@bcs.org