> Markdown version of [/events/world-congress-2024/sessions/295-how-can-my-software](https://www.wearedevelopers.com/events/world-congress-2024/sessions/295-how-can-my-software). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# How Can My Software Development Be 'Secure by Design'?


- **Date:** Friday, Jul 19, 2024
- **Time:** 10:20–10:50 (30 min)
- **Room:** STAGE 6 (120)
- **Event:** World Congress 2024

## Description

Secure software development and operations begin at the design stage. The term "Secure by Design" encompasses various principles such as secure architecture patterns, threat modeling and awareness among developers, and much more.

In this presentation, we will explore how to implement a "secure by design" approach in the software development process, with a particular focus on agile DevOps processes. In these processes, the development team itself takes responsibility for the product's security. Threat modeling has proven especially useful, both for considering security during the planning phase and for sharing knowledge within the team and building a security mindset. Gamification approaches, such as threat modeling card games, offer an accessible entry point even for teams without deep prior knowledge.

In the final part of the presentation, we will discuss how the essential automation for DevOps can be designed so that CI/CD does not become an entry point for attackers.

## Speaker

### [Christoph Niehoff](https://www.wearedevelopers.com/@christoph-niehoff)

TNG Technology Consulting


## Related talks at this congress

- [Better safe than sorry: Threat Modeling for Web Developers](https://www.wearedevelopers.com/events/world-congress-2024/sessions/253-better-safe-than) — Clemens Hübner
- [Real-world Threat Modeling](https://www.wearedevelopers.com/events/world-congress-2024/sessions/163-real-world-threat) — Ali Yazdani
- [Supply Chain Security - Strategies and Best Practices](https://www.wearedevelopers.com/events/world-congress-2024/sessions/271-supply-chain) — Hendrik Ebbers
- [Designing Secure Applications in the Cloud](https://www.wearedevelopers.com/events/world-congress-2024/sessions/385-designing-secure) — Adora Nwodo