track progress during a sprint. Figure 3: Example Burn Down Chart Program Backlog – Primary source of all requirements/desired functionality for the program Release Backlog – Subset of the program features the team considers relevant to building the product. The program backlog serves as the primary source for all program requirements and user stories, and the team must prioritize the contents to ensure The team then adds user requests for new features to the program backlog, and places tasks that address defects and uncompleted or rejected stories back into the release backlog. Prior to the next planning

as opposed to the essential?”Agile Abstract “Therefore it appears that the time has come to address the essential parts of the software task, those concerned with fashioning abstract conceptual structures results with which we are so familiar in the hardware area, we must consider those attacks which address the essence of the software problem, the formulation of these complex conceptual structures”Attack leads to another, until you end up working on something that seems completely unrelated to the original problemExample of Yak Shaving • “My client needed a simple wiki, but before I can help them I need…”

policies are expressed as code.” c. CREATE A SINGLE, SHARED SOURCE CODE REPOSITORY FOR OUR ENTIRE ORGANIZATION i. Firm-wide shared source code repository is powerful way to share local discoveries to Toyota Production System has improvement blitz – dedicated and concentrated period of time to address a given issue b. Target DevOps Dojo and 30-Day Challenge – teams work with dedicated Dojo coaches transfer security knowledge to the teams E. INTEGRATE PREVENTIVE SECURITY CONTROLS INTO SHARED SOURCE CODE REPOSITORIES AND SHARED SERVICES i. Add mechanisms & tools ii. Add security’s pre-blessed

decisions in the normal course of work.  Let’s say that we are deciding between two different open source products for building a piece of the system and do not know enough of their impacts to make the the data asset. These three assets represent the capabilities of the company and its ability to address the future Contributor: The senior leadership team includes someone called the CFO, who helps lead

f. Myth—DevOps is Just “Infrastructure as Code” or Automation: g. Myth—DevOps is Only for Open Source Software: 2. Foreword xix 3. Imagine a World Where Dev and Ops Become DevOps: a. THE CORE, CHRONIC Heroics: d. The Second Way: The Principles of Feedback 27 i. KEEP PUSHING QUALITY CLOSER TO THE SOURCE 1. In complex systems, adding more inspection steps and approval processes actually increases the

presenting https://www.csiac.org/podcast/dod-enterprise-devsecops-initiative/ DoD Centralized Container Source Code Repository (DCCSCR) https://dcar.dsop.io/ DSOP Group Workspace https://dccscr.dsop.io/dsopDCCSCR

Things, but Not When We Are Paid to Do Them  Example: AARP, Employer/Employee Relationships, Open Source Software  Observations: o “we live simultaneously in two different worlds – one where social norms

All streams of work were significantly behind schedule. Surprising discovery: only 50% of the source code in Dev/Test environments matched Prod. They fixed forward, but changes not put back into version

reduce cost and risk.  Custom code is almost not custom these days. A developer incorporates open source frameworks, uses standardized design patterns, and orchestrates services that are already available