What is container security? Container security isn’t new and there are a lot of vendors out there today pushing different variations of the same product. Picking a tool is the easy part but actually implementing standards with a design is easier said than done. …

Development, security, and operations Security has often caused friction within the Devops space. Security wants to be involved as they have the responsibility of securing the whole estate. Developers, on the other hand, like to have freedom and move forward with technology. In most cases, innovation happens within Devops. The business highlights problems and…

What is Azure DevOps? “Azure DevOps provides developer services for allowing teams to plan work, collaborate on code development, and build and deploy applications. Azure DevOps supports a collaborative culture and set of processes that bring together developers, project managers, and contributors to develop software. It allows organizations to create and improve products at…

Infrastructure as Code — What is it? Bicep is a domain-specific language (DSL) that uses a declarative syntax to deploy Azure resources. In a Bicep file, you define the infrastructure you want to deploy to Azure, and then use that file throughout the development lifecycle to repeatedly deploy your infrastructure. Source: Bicep language for deploying Azure resources…

Cloud Security — Infrastructure as code allows admins to deploy Infrastructure, faster and more consistently. It does this by creating a rinse and repeat process. The configuration and defined code is managed and secured ready to be used to deploy infrastructure to a standard. …

and when not… — Security is a key part of any business project new or old. It should be the heart of any design, and all should have the vision not to implement X without 100% sign-off from Security and Governance. With that in mind, we should make sure we have a security resource…

We’ve all heard of Phishing, but what is Whaling? Phishers, just like fishermen/women want the big prize. They could spend time getting smaller fish, or focus on the Whale. If you reflect this to an organisation, your Whales would be executives or directors (c-level). Basically those higher up the org…

Using the AWS Security Stack — As with most cloud platforms, the attack surface is huge. Whilst companies start to adapt to the culture of DevSecOps, and move away from IaSS, threats and misconfiguration only expand in size. For a human to spot and identify all of this is near impossible, so tools and automation are…

Stop forcing us to scan them! — I’ve started to notice the sudden rise of QR codes within the UK. This started to increase around the same time as COVID. Companies have now started to include them in menus, shop windows and takeaway items.