HOW TO DEFINITIVELY TRUST THAT THE CONTAINERS YOU ARE DEPLOYING INTO PRODUCTION CONTAIN WHAT YOU THOUGHT THEY CONTAINED — In part 1 of this series I shared some thoughts on the types of assurance needed to ensure container images are safe to be deployed to an enterprise’s production environment. In this article I share potential ways to implement that assurance, and I provide my recommendations for capturing the provenance…

Did you know that whilst you are sleeping your hamster is running an average of 9km on their wheel ? To put that into perspective your furry friend is running a marathon (26.2 miles) every week. Do you have a rodent friend at home ? One as a pet in…

BUILDING SECURE, “ASSURED” CONTAINER IMAGES FOR TRANSFER ACROSS HYBRID CLOUD ENVIRONMENTS AND BETWEEN MULTI-SECURITY ZONES Enterprises are increasingly using hybrid cloud to develop and run their business-critical workloads, often using public cloud to develop the solution and private cloud or on-premise infrastructure to host the production workload. Federal and Defence…

How can you protect your data whilst it is in use ? Solutions for protecting your data whilst it is in transit or at rest have been available for many years but what about protecting it when it is in memory ? Confidential computing is a concept in which encrypted…

How do you choose the best next feature for your software product ? When developing a new software product there are often lots of competing factors in choosing the next feature to develop. When there is an established backlog of features and each feature’s likely quantifiable business benefit is known…

How do you convey and manage the scope of your software product, and what tools do you use to monitor and govern your progress towards its delivery deadline ? I am a strong advocate of using User Story Maps to answers these questions and convey the scope of the product…