{"id":44455,"date":"2021-12-16T08:30:06","date_gmt":"2021-12-16T08:30:06","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/move-fast-break-security-why-cisos-must-push-back-against-agile-it\/"},"modified":"2021-12-16T08:30:06","modified_gmt":"2021-12-16T08:30:06","slug":"move-fast-break-security-why-cisos-must-push-back-against-agile-it","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/move-fast-break-security-why-cisos-must-push-back-against-agile-it\/","title":{"rendered":"Move fast, break security: Why CISOs must push back against Agile IT"},"content":{"rendered":"

Advertorial<\/span> The Vectra Masked CISO series gives security leaders a place to expose the biggest issues in security and advise peers on how to overcome them.<\/i><\/p>\n

Agile is about as buzzy as IT buzzwords get. From a well-meaning effort to enhance software quality and delivery speed, it\u2019s been increasingly mis-sold over the past two decades as a panacea to cure all IT ills. The methodology prioritises autonomy, speed of delivery and a \u201cmove fast, fail fast\u201d ethos, which is enough to make any CISO grimace.<\/p>\n

As the Agile dogma continues to spread, it\u2019s our job as dispassionate security leaders to push back.<\/p>\n

Agent of change or agent of doom?<\/span>
\n<\/h3>\n

Agile has its uses. As an iterative approach to software development, it can help teams speed time-to-market and remove roadblocks. It can be particularly effective for small organisations and teams.<\/p>\n

But it doesn\u2019t scale well, and it doesn\u2019t like complex heterogeneous environments. It certainly won\u2019t turn a failed delivery team into an effective one.<\/p>\n