Katie Bauer!

"We want to make it easy for developers to do the right thing when it comes to infosec. This can be achieved by ensuring that there are easy-to-consume, preapproved libraries, packages, toolchains, and processes available for developer and IT operations."

"What we see here is a shift from information security teams doing the security reviews themselves to giving the developers the means to build security in. This reflects two realities:"

"First, it's much easier to make sure that the people build the software are doing the right thing than inspect nearly completed systems and features to find a significant architectural problems and defects that involve substantial rework."

"Second, information security teams simply don't have the capacity to be doing security reviews when deployments are frequent."

If you've ever lamented that you as a DS are brought into the loop too late, these ideas are worth paying attention to. The artifacts you produce are different from those of an infosec engineer, but the concepts are exactly the same.

"Easy-to-consume" depends on what your team's responsibilities are, but they're all about format. Maybe it's bullet points in the executive summary of your write up, maybe it's a good SELECT * style aggregate table, maybe it's well thought out data models underpinning your tools

The theme here is friction reduction. If someone wants to use the knowledge generated by your DS team, they shouldn't have to be a specialist to obtain it

"Preapproved libraries, packages, toolchains" seems most related to the quality of your data platform. How fragmented is your data warehouse or your tool ecosystem? Does one person use sklearn while another uses statsmodels while another person uses Tensorflow?