Acuity Health: Part 2 — Zero Trust DevSecOps & NIST SSDF
How to build an isolated, Zero Trust development architecture using ephemeral runners, proxy-scanned package caches, and NIST SP 800-218 practices without slowing engineering velocity.
NIST SP 800-218
Designing a Secure Software Development Program: Acuity Health AppSec Framework
An engineering framework operationalizing NIST SP 800-218 (SSDF), CI/CD quality gates, and OWASP API security defenses in a healthcare delivery organization.