Acuity Health: Part 4 — CI/CD Quality Gates & ISO 27001 Risk
Implement automated SAST, SCA, and DAST pipeline quality gates and operationalize the 10-step ISO 27001:2013 risk assessment methodology for cloud architectures.
CI/CD
Acuity Health: Part 2 — Zero Trust DevSecOps & NIST SSDF
How to build an isolated, Zero Trust development architecture using ephemeral runners, proxy-scanned package caches, and NIST SP 800-218 practices without slowing engineering velocity.
Designing a Secure Software Development Program: Acuity Health AppSec Framework
An engineering framework operationalizing NIST SP 800-218 (SSDF), CI/CD quality gates, and OWASP API security defenses in a healthcare delivery organization.