The Cyber Defense eMagazine November Edition for 2023

Shifting Left Means Shifting Smart: Managing
Software Risk With ASPM
By Natasha Gupta, Senior Security Solutions Manager, Synopsys Software Integrity Group
As organizations embrace digital transformation efforts to speed up software delivery, security practices
have had to evolve. Development teams are increasingly shifting toward the software factory model—
setting up a scalable framework across people, processes, and tools for standardizing how applications
are developed and maintained. This has implications for how security workflows are implemented,
particularly when looking at testing automation, validating security controls, and building more secure
code. To keep up with the pace of modern development, application security programs need to achieve
the following:
• Enforce checks at each stage of the software development lifecycle (SDLC): Organizations
need solutions that can integrate assessment, controls, remediation, and validation within
pipelines to maintain continuous compliance. This includes centrally defining and enforcing
policies that orchestrate testing and prioritization.
• Provide accountability and transparency: Security and development teams need an accurate,
global perspective of all applications, components, and associated security data. This context is
Cyber Defense eMagazine – November 2023 Edition 163
Copyright © 2023, Cyber Defense Magazine. All rights reserved worldwide.