Agile + DevOps East 2019 - Agile Engineering & Development | TechWell

Agile + DevOps East 2019 - Agile Engineering & Development

Tuesday, November 5

Gene Gotimer
Coveros, Inc.
TD

Developing Secure Software—A Hands-on Approach

Add to calendar
Tuesday, November 5, 2019 - 8:30am to 12:00pm

If your idea of security in the development process is throwing your code to the security team for approval just before you deliver your app, release deadlines are probably stressful for you. You also know that there has to be a better way—a way to build security into the code from the beginning so that you have confidence that your code is as secure as you can make it when you deliver it. You have to use the right tools, while you pay attention to the details and the right techniques. Most of all, you have to be disciplined to use proper coding and testing practices. With a good...

Wednesday, November 6

Thomas_Haver
Designer Brands
AW11

Example Mapping: The New Three Amigos

Add to calendar
Wednesday, November 6, 2019 - 11:45am to 12:45pm

Example mapping is a collaboration technique used by teams to help refine requirements. Every team should have a set of “ready” criteria that includes some kind of workshop between development team members to establish a shared understanding. In a time-boxed example mapping session, rules will summarize examples or constraints about a user story, and questions about outcomes or dependencies are documented for future refinement. The end result is requirements written as user behavior, with a shared understanding among all roles on the agile team. Come ready to participate in a live example...

Alissa Lydon
Sauce Labs
AW12

Selenium Tests at the Speed of Headless

Add to calendar
Wednesday, November 6, 2019 - 11:45am to 12:45pm

Testing is shifting left. Developers want instant feedback on the quality of their code, and testers want to incorporate tests earlier in the pipeline without slowing down development efforts. Testing in full browsers is great when you’re near the end of the pipeline and need to confirm cross-browser compatibility, but for the scale and speed required for these early pipeline tests, there is a need for a more effective solution. Enter headless browsers, an emerging trend that allows you to run your early pipeline tests at scale. Headless offers a lightweight option that gives developers...

Blaine Carter
Oracle
AW14

DevOps Tools for Database Developers

Add to calendar
Wednesday, November 6, 2019 - 11:45am to 12:45pm

You're thinking about modernizing your database development process ... someday. You have directories full of SQL files you use to build your application. You know unit tests should be included as part of your build process, and you are going to start adding them ... maybe next week. Does this sound like you? If you think modernizing your dev process will be difficult, time-consuming, and expensive, you may be surprised at how easy and cost-effective it is to get started. Blaine Carter will explore how to manage your database application in a continuous development pipeline. He will talk...

Linda Rising
Independent
AW16

An Agile Fireside Chat with Linda Rising

Add to calendar
Wednesday, November 6, 2019 - 11:45am to 12:45pm

Come get your questions answered by an agile expert! We won't have an actual fireside, but Linda Rising will be on hand to answer your questions and discuss the topics that are most important to you. Linda is an internationally known presenter on topics related to agile development, patterns, retrospectives, the change process, and the connection between the latest neuroscience and software development. And she wants to discuss whatever interests you. Bring your questions and be ready for a lively, interactive discussion.

Christina Ambers
Thomson Reuters
AW18

Enter the Agile Dojo

Add to calendar
Wednesday, November 6, 2019 - 3:00pm to 4:00pm

The dojo is an experiment-rich environment for the team that encourages adding pieces and tools as needed, pushing experimentation, and learning first. What makes this dojo special is how adaptive it can be, considering teams no longer are all collocated. By using simple tools like a good camera, open call, and a free tool to display work, teams can collaborate across the world. The goal of the dojo is fourfold: Improve individuals and interactions, deliver working software, collaborate with customers, and respond to changes quickly. We'll talk about how agility can be applied to various...

AW19

The MVP Mental Model

Add to calendar
Wednesday, November 6, 2019 - 3:00pm to 4:00pm

Here is a question we should all ask ourselves when building new software: Am I building in small chunks? Thinking and actions around the minimum viable product (MVP) are vital in creating a shift to full team and organizational agility. Agile methods work great when building, testing, and learning in small, discernible, discrete pieces is the norm. If there is not a shift to smaller increments or even an understanding of how to do that, the agile transformation is going to be in trouble. Jim Grunder will show how to move team and organizational planning approaches to fundamentally smaller...

Peter Varhol
Technology Strategy Research
Gerie_Owen
Technology Strategy Research
AW20

Testing Serverless Applications

Add to calendar
Wednesday, November 6, 2019 - 3:00pm to 4:00pm

Serverless cloud applications are rapidly moving into the mainstream. In this model, teams focus on developing and deploying code on a known technology stack and runtime, with fixed interfaces for application, database, and network. It offers the advantage of lower costs, faster development, and elastic growth. But testing serverless applications also brings significant challenges to testers. Because the stack is maintained by the cloud provider, it is updated with new versions and security patches on a regular basis. Testers have to continuously test the stack interfaces to make sure that...

Sean Miller
Capital One
Suresh Chellapilla
Capital One
AW21

You Build It, You Own It!

Add to calendar
Wednesday, November 6, 2019 - 3:00pm to 4:00pm

The days of writing software and throwing it over the proverbial wall to operations and production support teams are over. It’s time we, as software development teams, become more accountable and take pride and ownership in what we do. The results will be better transparency, more autonomy, and reduced risk (among other things). Join Sean and Suresh as they walk through how Capital One tackled one particular project by leveraging DevOps and forming their "you build it, you own it" principles. You'll gain a better understanding of how to improve quality within your agile teams and how to...

Tom Stiehm
Coveros, Inc.
AW22

Shifting Security Left: The Innovation of DevSecOps

Add to calendar
Wednesday, November 6, 2019 - 3:00pm to 4:00pm

DevSecOps uses application security practices that have existed for a while. The innovation of DevSecOps is incorporating security into the daily workflow of the team rather than leaving it to the end, shifting security left by automating aspects of security testing. DevSecOps leverages DevOps practices to make application security a first-class citizen in the practices of modern software development. But that requires a culture change: DevSecOps starts before the code is even written, using techniques like threat modeling and risk analysis to figure out who will attack you and how. Come...

Sarah Withee
Independent Consultant
AW23

Building an Open Source Artificial Pancreas

Add to calendar
Wednesday, November 6, 2019 - 3:00pm to 4:00pm

Have you ever thought about what open source software or hardware could achieve? What if it could help improve people's lives by solving some of their health problems? After the medical tech industry kept promising a system to help automatically manage insulin for type 1 diabetic people and never delivering, some people got together to find ways to do it with the tech they already had. Over the past few years, a "closed-loop" system has been developed to algorithmically regulate people's blood sugars. After reverse-engineering bluetooth sensors and 915 MHz insulin pumps, the system became...

Helen J Beal
Ranger4
Guy Herbert
Atlassian
AW24

DevOps Panel: Compliance While Moving Faster

Add to calendar
Wednesday, November 6, 2019 - 3:00pm to 4:00pm

Do you want to move at the speed of DevOps, but need to show compliance to your organization, a governing body, or through regulation? Are you already struggling with compliance and want to know how DevOps could help? Come listen to our panelists as they answer questions about compliance and security in DevOps without slowing down. This panel is looking to answer your questions about all things Compliance, so be ready to participate.

Thursday, November 7

Julie Wyman
Excella
AT3

KonMari Your Backlog: Tidying Up Those PBIs

Add to calendar
Thursday, November 7, 2019 - 10:00am to 11:00am

Have you tidied up your personal life with Marie Kondo and are now wondering how to achieve the same effect in your work life? Do you have the feeling that the most valuable product backlog items (PBIs) are getting lost under a mountain of old stories, bugs, and tasks? If so, join Julie Wyman to learn how to adapt the KonMari method to tidy up your product backlog. Julie will share a short quiz you can use to gauge the current state of your own backlog and walk through five easy steps you can take to get started in your tidying process. She'll also share real-life examples, call out...

Eran_Kinsbruner
Perfecto
AT4

Stabilizing Continuous Testing in DevOps

Preview
Add to calendar
Thursday, November 7, 2019 - 10:00am to 11:00am

Software testing lags behind the pace of features development and digital innovation. Despite recent advancements, testing remains one of the biggest challenges in DevOps. Research shows that DevOps teams have an average of less than 60 percent test automation coverage—and that’s a problem. To scale DevOps and agile and realign the entire software release cycle, Eran Kinsbruner believes there needs to be a better solution. To increase test automation coverage, teams need to match software testing deliveries with the right testing tools, skill sets, and personas. Eran will explain...

AT5

The 7 Deadly Sins of DevOps

Add to calendar
Thursday, November 7, 2019 - 10:00am to 11:00am

Do you know teams that are merely doing "cargo cult DevOps"? Near the end of WWII, the Allies had airstrips on many islands in the south Pacific. The natives on these islands noticed that when the Allies put the "coconuts" on their ears and spoke into the "banana," the gods would send down a magical flying creature with food and supplies. When the war ended and the Allies left, the natives put the coconuts on their ears and spoke into the banana, and they wondered why the gods failed to bless them, too. They didn't understand headphones or radio transmissions or that someone must be...

Matty Stratton
PagerDuty
AT6

The Psychology of Chaos Engineering

Add to calendar
Thursday, November 7, 2019 - 10:00am to 11:00am

Chaos engineering, failure injection, and similar practices have verified benefits to the resilience of systems and infrastructure. But can they provide similar resilience to teams and people? What are the effects and impacts on the humans involved in the systems? This talk will delve into both positive and negative outcomes for all the groups of people involved, including users, engineers, product owners, and business owners. Using case studies from organizations where chaos engineering has been implemented, Matty Stratton will explore the changes in attitude that these practices create,...

Leslie Lowman
AvidXchange
AT12

Legacy Code and Testing: Let's Energize It!

Preview
Add to calendar
Thursday, November 7, 2019 - 11:30am to 12:30pm

Do you want to apply test automation to decade-old spaghetti code but aren't sure where to start? Many teams talk about needing automated tests in order to deliver faster, better quality but don't know just how to get there. Their code was created without a lot of the tools we have today or may have automation that centers on slow, record-and-playback methods. Join Leslie Lowman for an in-depth look at examples of this situation. She'll give some prerequisites, like instituting a solid testing model that focuses on automation, and show how to apply the testing model to older code,...

Tim_Guay
AgileWorks
AT15

A Fool with a Tool: The Dangers of Ignoring Culture by Overfocusing on Tools

Preview
Add to calendar
Thursday, November 7, 2019 - 11:30am to 12:30pm

Many organizations ignore culture and overfocus on picking and implementing the right tools. However, these tools have underlying cultural assumptions. If the current culture does not support these assumptions, then automation will only have limited success, or even fail altogether. So how do you address this problem? By recognizing that overfocusing on tools is a problem in the first place. Start by understanding the cultural assumptions supporting the optimum use of the tools, as well as how your organization measures up in relation to high-performing organizations. Finally,...

Jim Collins
CUNA Mutual Group
AT18

Using Lean XP to Supercharge Your Agile Delivery

Preview
Add to calendar
Thursday, November 7, 2019 - 3:30pm to 4:30pm

Most teams that do agile development start with Scrum. And why not? Scrum is a proven method for focusing your team, ensuring that work adds value, and minimizing the risk with release. Then, after awhile, Scrum becomes stagnant. There are no more speed increases, and the team focuses more on ceremonies than delivery. At this point, Extreme Programming (XP), and Lean XP in particular, is the next step in agile maturity. Lean XP means developing software at the last possible moment ("just-in-time development") using one-week sprints, test driven development, pairing at all levels,...

Guy Herbert
Atlassian
AT21

How DevOps and Agile Fit with Compliance Obligations

Add to calendar
Thursday, November 7, 2019 - 3:30pm to 4:30pm

DevOps and agile are designed to help you be adaptable and move quickly. But meeting your compliance obligations tends to slow you down and make processes rigid. However, by using key components of agile and DevOps and approaching compliance obligations from a different angle, you can meet your obligations while being adaptable. Guy Herbert will show examples of how his company structures their CI/CD processes to include compliance and how they have changed their compliance approach to be able to better meet the needs of the DevOps teams. Guy will also discuss the cultural implications of...

AT28

Contract Testing with Pact: A Different Approach

Add to calendar
Thursday, November 7, 2019 - 4:45pm to 5:45pm

With the microservice architecture evolving and becoming a golden standard, the necessity of testing the contracts between services appears to be more and more obvious. One of the most interesting solutions here is the Pact tool, which helps with testing and verifying the API contracts in a CI/CD manner and opens up a lot of interesting possibilities. However, the devil is always in the details: the implementation. We need to configure the Pact mock servers, but similar configurations are often needed across all the different parts of testing, from the verification of the providers to end-...

Dave Karow
Split
AT29

Feature Flagging: Proven Patterns for Control & Observability in Continuous Delivery

Preview
Add to calendar
Thursday, November 7, 2019 - 4:45pm to 5:45pm

Are you moving faster than fast? Congrats! Chances are you already use feature flags to decouple code deployments from feature rollouts. Whether you use a roll-your-own feature-flagging solution (with a few quirks) or a feature-flags-as-a-service solution, hopefully you post feature flag rollout changes to something like Datadog so that when a flag rollout lines up with an obvious spike, you know whom to have a talk with. It's a solid start, but that’s just the basics. What do data-driven CD ninjas do? They build in observability to every feature release, so when they push a...

Friday, November 8

DS1

Building Trust Between Security and Development to Accomplish Culture Change

Add to calendar
Friday, November 8, 2019 - 11:00am to 11:30am

DevSecOps empowers engineering teams to take ownership of how their product behaves in production, including security aspects. The primary goal of a DevSecOps initiative is to get development teams to shift their mindset and adopt security practices in their daily activities. However, this can only happen with healthy collaboration and mutual trust between development and security teams. Larry Maccherone can show you how. Larry will discuss how to effectively build trust between developers and security personnel to facilitate a successful DevSecOps program. He will present a proven "Trust...

Gene Gotimer
Coveros, Inc.
DS7

A Practical Approach to Building Security In

Add to calendar
Friday, November 8, 2019 - 1:30pm to 2:00pm

The release date is a week away. Development is complete. The code works, and everything looks good. Marketing is ready with the media blitz. Our customers are waiting to get their hands on the new features and are sure to give us good feedback. The only step left is to get the security group to scan the application and give us the approval to release. Cross your fingers- let’s hope we get the green light! Otherwise, I don’t know what we are going to do. DevOps, and more importantly, DevSecOps, promises to do away with rolling the dice at the end and hoping we are allowed to release what...

DS9

Panel Discussion: Getting Development and Security To Work Together

Add to calendar
Friday, November 8, 2019 - 2:30pm to 3:00pm

DevSecOps is all about getting security teams, practices, processes, and tooling integrated into your DevOps process but often getting a cross-functional team that includes security in place is difficult. Join DevSecOps practitioners in exploring the best ways to get security groups and personnel involved in day-to-day DevOps teams. Learn what role security personnel play in Sprint activities and how to remove compliance from being an end-of-lifecycle hurdle. Hear how leading organizations successfully shift security left and tips and tricks for getting started.