Slides from Milinda Rambel Stone's presentation at Agile Day Twin Cities 2019, hosted on November 20th at the RiverCentre in Saint Paul, MN. https://www.agiledaytwincities.com/

1. DevSecOps Value & its Organizational
Impact: A CSO’s perspective
Milinda Rambel Stone
VP & CISO

2. Agenda
• Path to Provation ( My Story)
• FUN! Teambuilding Exercise ☺
• Scaling DevSecOps
• Measuring DevSecOps
• Key Takeaways

3. Path to Provation ( My
Story)

4. My Path to Agile & Provation….

5. • Products focus on high physician
productivity and satisfaction,
maximum reimbursement, cost
reductions and improved efficiencies
and outcomes.
• Our software to enable the physician
to quickly, accurately and completely
capture all relevant procedure
details.
• Provation procedure documentation
solutions are trusted by leading
gastroenterologists worldwide.

6. Divestiture from Wolters Kluwer
Wolters Kluwer
Provation

7. I am a builder! I Got This!
My First Day at Provation

9. After a month or so, I learned the company
secret.
Office Shaped Like…….
a :

10. Time for Teambuilding….☺

11. Team Building Fun in 3 Easy Steps!
1. Turn to your Neighbor.
2. Did I hear Milinda correctly?
3. Did she just say the Provation office
is shaped like a COLON?

12. Yes. You heard me correctly.

13. Scaling DevSecOps

14. The purpose & intent of DevSecOps is to build on the
mindset that “everyone is responsible for security” with
the goal of safely distributing security decisions at speed
and scale to those who hold the highest level of context
without sacrificing the safety required.
DevSecOps & Agile
Source: What is DevSecOps? (Author: Shannon Lietz)

15. DevSecOps Learnings
DevSecOps Manifesto
Partner
Business
Driven
Measure Automate
Monitor
24x7
Share
Success
Stories

16. Security Story……Agile at Provation

17. Measuring DevSecOps
Success

18. • The Truth is in Data
• If you do not measure it, you will
miss the opportunity for pattern
and trend identification
Measuring DevSecOps Success

19. • Number of Self Reported Incidents
• Percent of Business Processes
• Security Risk Vector Reduction
• Percent of Security Controls Automated
• Crossfunctional Team “Happiness”
Key DevSecOps Measures

20. Key Takeaways

21. • Use Agile to Manage Change
• Change will happen. Macro and
Micro level (people, process,
technology)
• People at on different phases of the
change lifecycle. Understanding this
helps get you through the tough time
Key DevSecOps Takeaways

22. • People. Team is everything.
• If there is no team collaboration,
results are limited and SILO’s
occur.
• Cannot scale DevSecOps alone.
Need partners in crime to build
common goals.
Team Driven Approach

23. Automate & Measure
PEOPLE PROCESS TECHNOLOGY

24. • Agile and DevSecOps Work.
• Celebrating your Wins and
Learnings helps you scale.
• Never underestimate the value of
Agile. It is worth the start-up
costs!
Parting Thoughts

25. Thank you!

26. • Thank You!