DevSecOps Metrics and Continuous Improvement

Author

Tim Chase

Summary

Learn how to integrate security into DevOps using key metrics, automation, and collaboration to drive continuous improvement in DevSecOps workflows.

Join Tim Chase, the Global Field CISO at Orca Security, as he explores the integration of DevSecOps metrics for continuous improvement, emphasizing the need for a harmonized approach between development, security, and operations. Tim explains how to measure security performance using metrics like vulnerability detection rates and time-to-remediation, and how automation strengthens feedback loops for greater efficiency. Along the way, Tim explores frameworks like DORA, SANS, and the NIST Cybersecurity Framework, reviewing practical strategies for integrating them into DevOps pipelines. With a focus on fostering collaboration and data-driven decision-making, this course shows how security metrics can guide remediation priorities, improve stakeholder communication, and optimize resource allocation—embedding security throughout the software development lifecycle.