DevSecOps Maturity Score Quiz

This short quiz helps your DevSecOps team understand where you are in your DevSecOps maturity journey.

Question Title

1. How would you rate your team's Security Skills and Knowledge?

Informal and reactive security training

Regular training and a basic knowledge base

Advanced security training with hands-on learning

Mature training program that's fully integrated with the SDLC

Question Title

2. How would you describe your Developer Enablement?

Tasks performed manually based on tickets/requests

Testing is included throughout the SDLC and application environments are standardized

Security tools offered as a services, and Infrastructure as Code automates application environment creation

Security and app environments are reusable in the IDP; engineering handles issue triage

Question Title

3. How would you describe your team's Secure Design and Threat Assessment capabilities?

Secure design reviews are ad hoc, and informal threat monitoring is conducted

Cybersecurity teams conduct threat modeling and output security requirements

Threat modeling is shared across the SDLC and secure-by-design principles are regularly upheld

Security requirements are continuously and automatically monitored; engineering oversees design and threat review

Question Title

4. How would you describe your Automated Security Practices?

Application security testing (AST) is used but completed post-application build

AST is automated and integrated into tooling but results are reviewed outside the SDLC tools

Automation is integrated throughout the SDLC; insights are presented with developer tooling

AST tools are the default and continuously report potential issues to management systems

Question Title

5. How would you describe your team's approach to Software Supply Chain Security?

Source control management (SCM) is used

Reduced risk through the introduction of software composition analysis (SCA)

Automated processes for build and delivery; SDLC tools are advanced

Security is prioritized throughout the entire SDLC with multiple checks

DevSecOps Maturity Score Quiz

Question Title

* 1. How would you rate your team's Security Skills and Knowledge?

Question Title

* 2. How would you describe your Developer Enablement?

Question Title

* 3. How would you describe your team's Secure Design and Threat Assessment capabilities?

Question Title

* 4. How would you describe your Automated Security Practices?

Question Title

* 5. How would you describe your team's approach to Software Supply Chain Security?

Question Title

* 6. Ready for your results? Please provide your work email and we'll follow up to discuss the outcome you see upon submission. (Required.)

1. How would you rate your team's Security Skills and Knowledge?

2. How would you describe your Developer Enablement?

3. How would you describe your team's Secure Design and Threat Assessment capabilities?

4. How would you describe your Automated Security Practices?

5. How would you describe your team's approach to Software Supply Chain Security?

6. Ready for your results? Please provide your work email and we'll follow up to discuss the outcome you see upon submission. (Required.)