Security as Code

Where DevSecOps can help with traditional security requirements

▪ Code review becomes code preview

▪ Patching becomes build new environment and deploy

▪ Incident Response becomes Incident Avoidance using Threat Modeling