Securing development in an agile environment
...go hand in hand Done well, agile development and operations go hand in hand with secure systems. Security teams often rely on speed and transparency and this means involving many...
...go hand in hand Done well, agile development and operations go hand in hand with secure systems. Security teams often rely on speed and transparency and this means involving many...
On Friday 24 June, following the vote to leave the European Union, the Petitions service had to scale fast to accommodate unprecedented traffic levels. This is a guest post from Andrew White, the chief technology officer of Unboxed, on how …
We recently ran a one-day workshop on web security for technologists at the Government Digital Service (GDS). Security is a topic where lots of people lack confidence in their skills so we thought it was a valuable area to focus …
One of the GDS design principles is to do the hard work to make things simple. As part of the work we’ve been doing to migrate our publishing platforms, we’ve been simplifying the infrastructure of our search system. Lots of …
...and API iteration. In comparison, the (roughly) representational state transfer (RESTful) JavaScript Object Notation (JSON) APIs we’ve been developing over the last few years are simple and clear, but lack...
GDS is constantly on the lookout for great technologists to come and work with us. We have roles open at the moment for technical architects, developers, and web operations engineers but we have other more specific roles in the pipeline …
Our team is building a Platform as a Service (PaaS) for government so developers can quickly and easily host websites. We’re using the open source Cloud Foundry (CF) technology to ensure reliable hosting, and Amazon Web Services (AWS) for our …
I spoke recently at the Business Reporter’s Data Security in the Cloud event about how security has changed to face the reality of the modern internet era. The old world of assurance and compliance and ‘security says no’ won't cut …
Over the past 18 months or so we've devoted a lot of effort to the programme of migrating our confusing mix of publishing mechanisms to a new, more efficient centralised architecture. We've written a fair amount already about the progress of the migration and some parts of …
Back in 2012, GDS released some security guidelines for government services. Although we’re aware individual services have continually upgraded their own security practices, we’re now updating the guidelines to improve how we secure government services overall. We’ll be making 2 …