Despite the rapid growth of DevSecOps practices throughout various industries, there still seems to be a fair amount of trepidation, particularly among security practitioners and auditors. One of the first concerns that pops up is a blurted out “You can’t do DevSecOps here! It violates separation of duties!” Interestingly, [...]