Working Group B

Continuous Deployment or Continuous Suffering: DevSecOps Adoption on Ground Systems

Description

The adoption of DevSecOps in government programs is growing significantly, especially on the Ground Systems. These efforts incorporate modern software engineering practices from the commercial innovation and shift from traditional development to rapid and iterative software system development, yielding expedited capability delivery to warfighters. The unique settings of Government Programs introduce constraints that sometimes force the DevSecOps adopters to tailor their processes. Therefore, we have different challenges and different risk profiles that the IT sector may not have.

The purpose of this working group is to create a forum where working group participants can share their experiences and raise their questions about practices, culture and regulations that we have to adapt for DevSecOps adoption on Ground programs. Working group leads will facilitate a discussion to identify pitfalls and best practices.

• • Presentation (30 Minutes) – The working group leads will provide background information and share experiences on common DevSecOps challenges.
  • Pain points (30 minutes) – The working group participants share challenges associated with DevSecOps adoption on ground systems.
  • “What If?” Scenario Discussions (~3 Hours) –The working group leads will present discussion topics. Participants will work together in small groups on topics of their interest to discuss recommended options and potential outcomes. The topics for scenario discussions are, but not limited to:
    • Shift left on stakeholder collaboration
    • Enterprise-level technical and non-technical interoperability
    • Incentive fee on DevSecOps adoption
    • Who pays for what? Different colors of money
    • Useful metrics for leadership, technical teams and cyber teams
    • Configuration Shift and Environment Shift: What are the expectations on different environments and how to control the discrepancies?
    • How much security is enough? Where is the sweet spot between security driven and speed-driven development?
    • Training: How, how often, and where?
    • DevSecOps in the next five years

Dr. Supannika Mobasser and Ashley Hunter, The Aerospace Corporation

Biographies

Dr. Supannika Mobasser is a Senior Project Leader, Software Engineering Subdivision at The Aerospace Corporation. Dr. Mobasser’s research interest areas are; Agile and Lean Software Development, Expediting Systems Engineering,Software Process Improvement, Software Process Quality Assurance, and Software Metrics and Measurement. She is a certified Scrum Master, a certified Scrum Product Owner, SAFe Agilist, SAFe DevOps Practitioner, SAFe Government Practitioner, and SAFe Product Owner. She received her Ph.D. in Computer Science from the University of Southern California in 2010. Together with Dr. Barry Boehm, Dr. Jo Ann Lane, and Dr. Rich Turner, she published a book entitled “The Incremental Commitment Spiral Model: Principles and Practices for Successful Systems and Software”.

Ashley Hunter is an Engineering Specialist in the Software Systems and Acquisition Department at The Aerospace Corporation. Her areas of interest are Agile software methodologies and both the software development and testing lifecycles, with an emphasis on software verification and quality assurance. With more than 12 years of experience in the Aerospace, Video Gaming, and IT Operations industries, she has contributed her skillset to domains ranging from aerospace systems and application performance management to digital interactive entertainment and computer gaming.Ashley has a B.S. in Computer Science from Loyola Marymount University with a minor in Graphic Design.