The State of DevSecOps in the DoD: Where We Are, and Whats Next

DevSecOps practices foster collaboration among software development, security, and operations teams to build, test, and release software quickly and reliably. A high-stakes, high-security environment has challenged the implementation of these practices within the Department of Defense (DoD). The DoD Chief Information Officer (CIO) organization partnered with the Software Engineering Institute (SEI) to conduct the first study to baseline the state of DoD DevSecOps, highlight successes, and offer insights for next steps. George Lamb, DoD’s Director of Cloud and Software Modernization, joins the SEI team to discuss key results and how they will help the DoD ensure that its software ecosystem is effective, scalable, and adaptable to meet the challenges of today and tomorrow.

What Attendees Will Learn:

Highlights from important success stories in DoD’s DevSecOps journey
How the DoD is harvesting grassroot successes by individual software organizations to implement those successes at scale
Keys to using data and building effective measurement strategies to enable optimization of software delivery

Speaker and Presenter Information

Eileen Wrubel serves as the Technical Director of the Transforming Software Acquisition Practice and Policy Directorate at Carnegie Mellon University�s Software Engineering Institute (CMU SEI). She is responsible for coordinating the strategic planning and tactical execution of the SEI's initiatives to power bolder, faster, and more adaptive acquisition, modernization, and sustainment of software-enabled capability. Her directorate integrates a unique combination of expertise in software acquisition, engineering, and measurement with technical research across the SEI. This integration serves to drive evidence-based evolution of policies and practices across the entire software acquisition lifecycle and to accelerate the speed of adoption of software innovation for the Department of Defense (DoD) and government agencies.

Brigid Petrie O�Hearn is a senior member of the technical staff and senior software acquisition innovation specialist at the Carnegie Mellon University Software Engineering Institute (SEI), working in the Software Solutions Division.

O�Hare and cyber policy, influences DoD software workforce initiatives, and contributes to research projects.

Recently, O�Hearn has been involved with OSD�s Software Acquisition Pathway team within Acquisition Enablers. She shares her software expertise across many areas, including acquisition best practices, software metrics, and navigating weapon system-specific challenges through the Weapons Ignite initiative. She has also helped OSD develop acquisition and workforce guidance.

Mr. George Lamb is the Director for DOD Cloud and Software Modernization in the Information Enterprise Office of the DOD CIO. He leads the team responsible for the DOD Software Modernization Strategy and associated Implementation Plan, as well as organizing the Action Officer working group coordinating the strategy across the department. Mr. Lamb joined the DOD/CIO two years ago after a career working across the Federal and Civilian technical community. He was a global staff engineer at Dell advising clients on open network across the US North-East and the Federal sectors. He also was the Federal Systems Engineer at Nicira, a Silicon Valley startup that invented network virtualization and was acquired by VMware and became the NSX product line. And he spent 10 years at IBM as a Chief Architect and Technical Systems Manager for the U.S. Intelligence Community.

He is a graduate of Carnegie Mellon University with a B.S. degree in Pure Mathematics and Professional Writing and from the University of Delaware with a M.S. degree in Computer Science. He was also an elected director of the Northern Virginia Soil and Water Conservation District.