Stop driving on the sidewalk!

In software development and delivery, it sometimes feels like we're perpetually stuck behind a slow-moving vehicle. Sometimes we can easily go around, and sometimes we can't see what's really holding us up. In our experience, many teams are barely peeking over the steering wheel! Our workshop is aimed at sharing a technique that will help you arrive at faster, safer, and happier - whether you're stuck in a ditch or cruising the highway.

This workshop will introduce a simple method you can use to discover, define and communicate risks and opportunities affecting your teams. Even better, you can use it regardless of what team, department or silo you find yourself in. We'll examine visual representations of valuable data you can use to have productive conversations, make confident decisions, and align towards making real progress.

Takeaways:
- How to create a collaborative Value Stream Map  
- How to use Value Stream Maps to find and diagnose workflow bottlenecks  
- How to build actionable, data-driven maps that make the path clear to everyone  
- How to use maps to target your improvement and automation efforts where you need them most  

Tackle complexity, friction and waste in a few hours with a versatile and actionable mapping technique.

Not only will you see dramatically improved alignment and collaboration, but you can do it all remotely with free tools.

We'll show you how with the right map, you can be 20% better tomorrow.

TACO is an acronym I use with clients to help them map controls from their software delivery pipelines to the organizational controls.

TACO stands for Traceability, Access, Compliance, and Operations.

The approach consists of a base list of 25 automatable controls that are documented and the control activity, artifacts and SOR identified. After mapping how these controls are handed we map them to the organizational controls and identify any gaps.

This model allows for the creation of opinionated pipelines and helps create a common understanding across teams as to what is required in order to be secure.

Taking a TACO approach can be considered a part of implementing a DevSecOps program and I’ve used this approach at multiple banks. I’ve given the base talk at three conferences and multiple times to internal teams. It helps build organizational confidence in the automation of software delivery.

During the talk, I’ll run through the different categories of controls, how they are implemented, what the purpose of them is, how to create robust feedback loops for controls such as SAST and how to handle long-running processes such as DAST.

Content is fairly high level but I can dig into specifics of each given area as questions arise.

This experience report details my 2019 involvement with 3 organizations of 3 different sizes (small startup, small-to-medium enterprise, and giant enterprise) to illustrate how I've used a form of Value Stream Mapping to help them define their current state and leverage data collected in the process to confidently identify (often surprising) risks and opportunities.

How to Navigate Software Delivery With Confidence  

Too many organizations rely solely on "Compasses" like specific metrics, principles and reference companies (being more like Spotify) instead of pairing that reference with "Maps" of where you are right now, and what surrounds you. I'll introduce some of my favourite maps: Value Stream, Dependency and Capability Maps, and how to use them to move with confidence towards your compass target.  

Takeaways:
- How Value Stream, Capability and Dependency Maps help visualize and share what's between you and where you want to go  
- How to pair Compasses with Maps to drive progress in the right direction  
- Clear examples of data-driven maps that make the path clear to everyone