Building in Security at Agile Speed - Practical SDLC Guidance

Our review of Building in Security at Agile Speed finds it most useful for engineering leads, security champions, and development teams seeking an actionable way to weave security into fast-paced software cycles. The authors, Dr. James Ransome and Brook S.E. Schoenfield, argue that security is fundamentally a human activity and present a holistic, generic software development lifecycle designed to work at Agile and DevOps speed. This book's single biggest reason to buy is its people-centered methodology that maps roles, processes, and verification steps to real-world rapid development contexts.

Key Features

• Human-centered security: Emphasizes that people create and maintain security, helping teams align roles and responsibilities for clearer outcomes.
• Holistic SDLC design: Lays out a generic software development lifecycle that integrates security into each phase rather than treating it as an add-on.
• Agile and DevOps fit: Provides approaches that are compatible with high-speed, iterative development so security keeps pace with delivery.
• Practical processes: Describes methodologies and verification steps teams can adopt to operationalize security without heavy overhead.
• Authoritative perspective: Builds on prior works and experience from the authors to synthesize a coherent model aimed at practitioners.

Who It's For

This book is best for software developers, DevOps engineers, security architects, and team leads who need to embed security into continuous delivery workflows and want a framework oriented around human processes. It will also help security champions who must coordinate across teams and influence behavioral change without slowing releases.

Those looking for deep cryptographic theory, platform-specific tool how-tos, or a catalog of vulnerability exploits may want a different reference; this book focuses on lifecycle design and people-centric practices rather than low-level protocol details.

Pros & Cons

Pros

• Clear focus on the role of people, which makes security efforts more sustainable in organizations.
• Practical lifecycle model that teams can adapt to Agile and DevOps workflows without adding excessive bureaucracy.
• Combines methodologies, processes, and verification in a single coherent design, aiding adoption across roles.

Cons

• Not a step-by-step tool guide, so teams expecting specific platform instructions may find it higher-level.

Specifications

Title	Building in Security at Agile Speed
Authors	James Ransome, Brook S.E. Schoenfield
Topic	Software development lifecycle and security
Approach	Human-centered, holistic SDLC design
Intended audience	Developers, security architects, DevOps teams
Focus	Embedding security at Agile and DevOps speed

Our Verdict

Building in Security at Agile Speed is a practical, people-focused guide for teams that must retain velocity while improving security. Its lifecycle-centric model and emphasis on roles and verification make it good value for engineering and security leaders seeking sustainable practices rather than tool checklists.

Frequently Asked Questions

Does this book cover Agile and DevOps workflows?
Yes, the authors explicitly design the lifecycle and processes to work at Agile and DevOps speed.

Is it a technical how-to for specific tools?
No, it focuses on methodologies and people-centered processes rather than platform-specific tool instructions.

Who wrote the book and why does that matter?
Dr. James Ransome and Brook S.E. Schoenfield authored it; their prior work and experience inform a holistic approach that emphasizes human roles in security.