There is more widespread recognition in recent years that "Security is a management issue", with more business organisations following adequate news and vulnerability information.
On the other hand, operators are often left to bear the burden of taking specific measures and handling of such issues.
It is especially deeply troubling in operational fields where a system was developed with multiple designs and policies, which requires various options to be taken into consideration according to the situation and the environment, as both tentative and long term measures.
Given that not taking any measure would not be an option, and with more open source tools available, this session introduces use case of DevSecOps by combining such tools without too much cost, and seeks to have discussions with all participants on how to fill in missing piece in areas the issues remain, and how we can all make everyone happy.
