Making Agile and DevOps methodology compatible with PCI requirements

Posted by kenchew on Programmers See other posts from Programmers or by kenchew
Published on 2013-11-06T16:24:49Z Indexed on 2013/11/06 22:07 UTC
Read the original article Hit count: 211

Filed under:

agile

|

development-process

|

security

|

legal

Would like to hear from those working in a PCI compliance environment and is practicing agile development and devops methodology, how you maintain compliance with PCI requirements.

Specifically, what do you do to address:

separation of duties between development/test and production
alignment of continuous integration / deployment and change control
alignment of agile stories to requirement documentation

© Programmers or respective owner

Related posts about agile

Is Agile the new micromanagement?

as seen on Programmers - Search for 'Programmers'
Hi, This question has been cooking in my head for a while so I wanted to ask those who are following agile/scrum practices in their development environments. My company has finally ventured into incorporating agile practices and has started out with a team of 4 developers in an agile group on a… >>> More
Is Agile the new micromanagement?

as seen on Programmers - Search for 'Programmers'
This question has been cooking in my head for a while so I wanted to ask those who are following agile/scrum practices in their development environments. My company has finally ventured into incorporating agile practices and has started out with a team of 4 developers in an agile group on a trial… >>> More
Security Talk Webcast: Agile Security - Develop Code Rapidly and Securely with SDL-Agile

as seen on Dot net Slackers - Search for 'Dot net Slackers'
Find out how SDL and Agile can be made to work well together - and in many ways actually work better together than separately. Get an in-depth look at the new MSF-Agile+SDL process template for Visual Studio Team System that can help development teams integrate SDL-Agile tasks directly into their… >>> More
Agile Awakenings and the Rules of Agile

as seen on Geeks with Blogs - Search for 'Geeks with Blogs'
For those that care, you can read my history of management and technology to understand why I think I’m qualified to talk about this at all. It’s boring, so feel free to skip it. Awakenings I first started to play around with the idea of “agile” in 2004 or 2005. I found a book on the Rational… >>> More
Agile isn’t always Agile

as seen on SQL Blog - Search for 'SQL Blog'
I want to make a disclaimer before I dive into this topic – At Microsoft we use all kinds of development methodologies, and I’ve worked in lots of other shops using lots of methodologies. This is one of those “religious” topics like which programming language or database is best, and is bound to generate… >>> More

Related posts about development-process

JAMES Mailet development process

as seen on Stack Overflow - Search for 'Stack Overflow'
I'm starting a project that involves writing mailets for Apache James. As far as I can tell, the only way to test a change in my code (on Windows) is through the following steps: Compile the mailet code Build a jar file containing the mailet Copy the jar file into the apps/james/SAR-INF/lib directory Start… >>> More
Do PHP Framworks Speed Up the Development Process?

as seen on Stack Overflow - Search for 'Stack Overflow'
I recently started working for a web firm as a freelancer taking my hobby of coding in PHP to a career level, and since then I have been overwhelmed by the amount of work that needs to be done within short time frames. The problem isn't being able to do what is asked, but being able to do it all… >>> More
Development process for an embedded project with significant hardware changes

as seen on Stack Overflow - Search for 'Stack Overflow'
I have a good idea about Agile development process but it seems it does not fit well with a embedded project with significant hardware changes. I will describe below what we are currently doing (Ad-hoc way, no defined process yet). The changes are divided into three categories and different processes… >>> More
Setting up an efficient and effective development process

as seen on Stack Overflow - Search for 'Stack Overflow'
I am in the midst of setting up the development environment (PHP/MySQL) for my start-up. We use three sets of servers: LIVE - the servers which provide the actual application TEST - providing a testing version before it is actually released DEV - the development servers The development servers run… >>> More
Organising asp.net website development process

as seen on Stack Overflow - Search for 'Stack Overflow'
Is there a standard practice to organize the process of developing a simple website. there is no use implementing MVC as there is no data base involved. It will be very useful in organizing the project and separating the aspx files and master page content(this can be very useful in implementing… >>> More