DevSecOps Value & its Organizational
Impact: A CSO’s perspective
Milinda Rambel Stone
VP & CISO

Agenda
• Path to Provation ( My Story)
• FUN! Teambuilding Exercise ☺
• Scaling DevSecOps
• Measuring DevSecOps
• Key Takeaways

Path to Provation ( My
Story)

My Path to Agile & Provation….

• Products focus on high physician
productivity and satisfaction,
maximum reimbursement, cost
reductions and improved efficiencies
and outcomes.
• Our software to enable the physician
to quickly, accurately and completely
capture all relevant procedure
details.
• Provation procedure documentation
solutions are trusted by leading
gastroenterologists worldwide.

Divestiture from Wolters Kluwer
Wolters Kluwer
Provation

I am a builder! I Got This!
My First Day at Provation

After a month or so, I learned the company
secret.
Office Shaped Like…….
a :

Time for Teambuilding….☺

Team Building Fun in 3 Easy Steps!
1. Turn to your Neighbor.
2. Did I hear Milinda correctly?
3. Did she just say the Provation office
is shaped like a COLON?

Yes. You heard me correctly.

Scaling DevSecOps

The purpose & intent of DevSecOps is to build on the
mindset that “everyone is responsible for security” with
the goal of safely distributing security decisions at speed
and scale to those who hold the highest level of context
without sacrificing the safety required.
DevSecOps & Agile
Source: What is DevSecOps? (Author: Shannon Lietz)

DevSecOps Learnings
DevSecOps Manifesto
Partner
Business
Driven
Measure Automate
Monitor
24x7
Share
Success
Stories

Security Story……Agile at Provation

Measuring DevSecOps
Success

• The Truth is in Data
• If you do not measure it, you will
miss the opportunity for pattern
and trend identification
Measuring DevSecOps Success

• Number of Self Reported Incidents
• Percent of Business Processes
• Security Risk Vector Reduction
• Percent of Security Controls Automated
• Crossfunctional Team “Happiness”
Key DevSecOps Measures

Key Takeaways

• Use Agile to Manage Change
• Change will happen. Macro and
Micro level (people, process,
technology)
• People at on different phases of the
change lifecycle. Understanding this
helps get you through the tough time
Key DevSecOps Takeaways

• People. Team is everything.
• If there is no team collaboration,
results are limited and SILO’s
occur.
• Cannot scale DevSecOps alone.
Need partners in crime to build
common goals.
Team Driven Approach

Automate & Measure
PEOPLE PROCESS TECHNOLOGY

• Agile and DevSecOps Work.
• Celebrating your Wins and
Learnings helps you scale.
• Never underestimate the value of
Agile. It is worth the start-up
costs!
Parting Thoughts

Thank you!

• Thank You!