1. Confidential │ ©2021 VMware, Inc.
David M. Zendzian (dmz) @dmz006
Global Field CISO, VMware Tanzu
Getting Security in the Loop:
Building Balanced Teams

2. Confidential │ ©2021VMware,Inc. 2
DevSecOps is the new DevOps is the new Dev is the new …

3. Confidential │ ©2021VMware,Inc. 3
We can never fully succeed alone: Bridging the DevSecOps Divide
“Organizations expect
developers to be more
involved with security
tasks in the future,
particularly among cloud
and workload tasks.
However, developers
currently aren’t very
involved in security
strategy planning or
execution”
It is important for security
and development teams to
work together so that
development teams are
clear which policies to
comply with and which
tools are approved.

4. Confidential │ ©2021VMware,Inc. 4
Well balanced teams require many different skills
Product Manager
Product Designer
Product Engineer
Security
Support
Marketing
Sales

5. Confidential │ ©2021VMware,Inc. 5
Teams need to empathize and adopt
DevOps and SRE are all new to security teams
Involve developers /
security in planning
early and often
Security needs to
learn language of
development team
Share KPIs and
increase
communication to
improve relationships
Automate security –
devops is new to
security world

6. Confidential │ ©2021VMware,Inc. 6
All great journeys are full of challenges
Plan for the entire journey, not just the first hill you cross
Shiftingsecurity left
without providing
context or support will
not succeed
Incentivize the team
toward the goals–
solvingproduct
problem, security,
speed and features
Great things happen
with a heterogeneous
team with different
skills

7. Confidential │ ©2021VMware,Inc. 7
A well-balanced team isn’t afraid of the challenge

8. Confidential │ ©2021VMware,Inc. 8
Successful teams are teams that work together

9. Confidential │ ©2021VMware,Inc.
Thank You
Please email any questions to dzendzian@vmware.com