The CISO's Guide for Implementing DevSecOps in the Enterprise
Chapter Summary
Fred Jekel
CISO @ Van Lanschot Kempen
DevSecOps at Van Lanschot Kempen
In this chapter, Fred Jekel, CISO at Van Lanschot Kempen will explore the importance of security in the software development lifecycle (SDLC) through DevSecOps, which fuses offensive security and development to drive security.
The chapter discusses the author’s belief that security should be an integral part of SDLC and not handled by a separate team. For DevOps to include security, the security team must have the right expertise in-house to challenge developers and create a culture of mutual respect. To promote transparency, Key Performance Indicators (KPIs) are crucial.
The chapter also recommends creating a center of excellence that tests and monitors build and creates a report that lists the most important teams from a security point of view. By doing this, teams that do not request the necessary checks can be identified and necessary interventions made. The article emphasizes the importance of having the right governance, culture, and mindset, with transparency being the foundation of this approach.
The interview concludes by discussing a combination of expertise, mutual respect, and transparency that can help organizations achieve security in DevOps.
BIO
Fred Jekel is the Executive Director of Cyber Security / CISO at Van Lanschot Kempen, a specialized, independent wealth manager that provides private banking, asset management, and merchant banking services to individuals and institutions. Its headquarters are in ‘s-Hertogenbosch, the Netherlands, and it has offices in Belgium, Switzerland, the US, and the UK. In his role, Fred is responsible for the coordination of cyber- and information security across Van Lanschot Kempen.
After finishing his Master’s in Industrial Engineering & Management, Fred worked for two years as a developer in the financial industry. He then joined EY and became a Registered IT Auditor (RE). In 2002 he joined Fortis Audit Services where his proudest achievement was transforming their paper-based audit process to a fully digital environment. In 2008 Fred joined Van Lanschot Kempen as the audit manager for operational and IT audits. Five years later he moved into the IT management team to focus on security and governance. In 2019 he finished an Executive MBA in Business & IT at Nyenrode.
Fred lives in Zeist with his partner and two daughters, who are currently studying. He likes to spend his free time on his many active hobbies including running, road and mountain biking, skiing, and sailing.
About the Book
As a leading provider of DevSecOps services, DevOn has seen firsthand how organizations can benefit from these transformations. But despite the widespread adoption of DevSecOps, there are still many misconceptions about what it is and what it can help you achieve. In this book, we address common concerns and misconceptions about DevSecOps, drawing on the insights of technology leaders from a variety of European organizations.
If you’re a modern-day leader looking to assess your organization’s performance or embark on a DevSecOps transformation, this book is a must-read. With the help of Irfaan Santoe, Rahul Sah, and Markus van Duijn, we’ve gathered the perspectives of 10 technology leaders from leading organizations to provide a comprehensive understanding of the current state and future of DevSecOps. Don’t miss out on the opportunity to gain valuable insights and learn from their organizations' performance.
Book Launch Event
About the Authors
Irfaan Santoe
Irfaan is a CISO, an Entrepreneur in InfoSec, and a Thought Leader in secure DevOps. He is on a mission to close the gap between the IT world of Development, Operations, and Security. Irfaan is the OWASP Chapter Leader in the Netherlands and actively contributes to open-sourcing security.
Rahul Sah
The Global CEO of DevOn, a technology consulting and software delivery organization, Rahul is passionate about helping organizations accelerate their journey toward high-performance enterprises.
Markus van Duijn
A DevOps enthusiast with 15 years of experience in agile, CI/CD, DevOps, security and leadership, Markus has seen firsthand how DevOps gets companies to a higher level by coaching, teaching, and experiencing DevOps principles
LEARN HOW THESE FRONTRUNNERS USE DEVSECOPS
DevSecOps Visions from
10 European Information Security Leaders
Gain Insights from Information Security Leaders. Click on photos to read Speaker Chapters.
Security Director @ Philips
CISO @ Van Lanschot Kempen
"Implementing DevSecOps in the Enterprise: A Guide for CISOs" BOOK
TAP INTO OUR EXPERTISE & RECEIVE YOUR COMPLIMENTARY COPY!
Find motivation and receive tailored advice in just 15 minutes!!
Explore Our Bestselling Book Collections
