Blog subjects

[Tracy Ragan]

The Ortleius Outreach team is working on topics for a blog calendar starting in September. Here is what they have so far. We would love for you take a look at the topics and let us know if we have missed a topic related to a central evidence store of DevSecOps data. 

High Level Topics
What OpenSSF Security Tooling should be the DevOps Pipeline?	September
What Data is Important to Measure in the DevSecOps Pipeline?	October
Understanding and Mitigating Vulnerabilities	November
Future Directions for Continuous Security Intelligence	December
How can AI & ML improve DevSecOps workflows?	January
How do you track and report security compliance	February
Understanding Software Bill of Materials and its Uses	March
Understanding how to comply with Government SBOM Requirements	April
Using Mitre Attack for Threat Modeling	May
Understanding Secure Software Development Framework	June
Open to all Blogs (any topic of your choosing)	Anytime

--

Kind Regards,

Tracy Ragan

CEO and Co-Founder / DeployHub / tel: + 1.505.424.6440/ mob: +1.505.780.0558

Lets chat - here is my calendar link

Follow me on: Blog / Twitter / Facebook / LinkedIn / YouTube / GitHub

"First a new theory is attacked as absurd; then it is admitted to be true, but obvious and insignificant; finally it is seen to be so important that it's adversaries claim that they themselves discovered it." William James