article thumbnail

The Shift Beyond the Hype: Transitioning from Vanity Metrics to Authentic Business Objectives

Xebia

The post The Shift Beyond the Hype: Transitioning from Vanity Metrics to Authentic Business Objectives appeared first on Xebia. Additionally, when companies share their business goals with stakeholders like investors, partners, and employees, it weaves a more exciting and relatable story than a list of numbers without context.

Metrics 130
article thumbnail

Reducing CIO-CISO tension requires recognizing the signs

CIO

For example, new multifactor authentication functionality requires new customer communications and perhaps associated short-term disruption of the channel, something that may be difficult for the business to accept. A fifth example is DevOps, as many CIOs, including myself, advocate for continuous delivery at velocity.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Trending Sources

article thumbnail

What GitHub’s 2FA Mandate Means for Devs Everywhere

DevOps.com

Multifactor authentication (MFA) is becoming increasingly standard within software development organizations, with GitHub recently announcing that two-factor authentication (2FA) will be mandatory for all code contributors by the end of 2023. This is a smart move.

article thumbnail

Managing Hardcoded Secrets to Shrink Your Attack Surface 

DevOps.com

The practice of hardcoding secrets—such as authentication credentials, passwords, API tokens and SSH Keys—as non-encrypted plain text into source code or scripts has been common in software development for many years. It is an easy way to save time and labor, but it is also highly insecure. The issue is that anyone with access to […].

article thumbnail

Introduction to SPIFFE/SPIRE

DevOps.com

And many open standards and identity providers on the market continue to evolve how users authenticate and authorize with websites and applications. For a long time, people have been logging into the apps they use via passwords or password managers. The post Introduction to SPIFFE/SPIRE appeared first on DevOps.com.

article thumbnail

GitHub Brings 2FA to JavaScript Package Manager

DevOps.com

GitHub has made generally available a two-factor authentication tool for the package manager for JavaScript applications maintained by its NPM, Inc. In addition, all npm packages have been re-signed and there is now an npm command line interface (CLI) command to audit package integrity.

article thumbnail

Scribe Security Unveils Pair of Tools to Secure Software Supply Chains

DevOps.com

The Scribe Integrity tool authenticates open source and proprietary source code before it is uploaded into a build. Scribe Security today unveiled a Scribe Integrity tool that scans software artifacts to make sure they comply with IT organizations’ security policies before they are integrated into an application.

Tools 103