.. rst-class:: cover-top

.. raw:: html

    <style>.rst-content section h1:first-of-type {display: none;}</style>
    <h1>DevSecOps Practices</h1> <!-- manual title because raw html won't accept rst substitution -->
    <h2>Example Implementation 1 & 2 (Using Generative SI)</h2>

=============================================================================
DevSecOps Practices: Example Implementation 1 & 2 (Using Generative SI)
=============================================================================



.. container:: cover

   |
   |

   September 2026

   |

   
   |

   This publication is available free of charge from https://www.nccoe.nist.gov/projects/secure-software-development-security-and-operations-devsecops-practices 

   |


   |nccoenistlogos|

   |
   |



.. container:: cover-author-grid-3

   .. container:: cover-author-block

      | **Alper Kerman**
      | **Michael Ogata**
      | National Institute of Standards and Technology



      | **Drew Buttner**
      | **Parisa Grayeli**
      | **Joshua Klosterman**
      | **Phillip Millwee**
      | **Deanna Stanley**
      | **Allen Tan**
      | The MITRE Corporation


      | **William Barker**
      | Dakota Consulting



      | **Sudan Ayanam**
      | **Stefano Righi**
      | AMI



      | **Chrissa Constantine**
      | **Tim Mackey**
      | Black Duck




      | **James Imanian**
      | CyberArk

   .. container:: cover-author-block


      | **Daniel Carroll**
      | **Daniel Jackson**
      | Dell Technologies



      | **Dean Coclin**
      | **Dave Roche**
      | DigiCert



      | **Matt Brown**
      | **Tom Gleason**
      | Endor Labs
      


      | **MaryGrace Wajda**
      | GitLab



      | **Isaac Hepworth**
      | **Brandon Lum**
      | Google



      | **Philippe Mulet**
      | **Harmeet Singh**
      | IBM

   .. container:: cover-author-block


      | **Tal De La Rosa**
      | **Segu Riluvan**
      | **Mark Svancarek**
      | Microsoft



      | **Keng Lim**
      | **Sameer Shukla**
      | NextLabs



      | **Chima Onukwuru**
      | **Neil Roxburgh**
      | Palo Alto Networks



      | **Guy Chernobrov**
      | **Daniel Nebenzahl**
      | Resilience Cyber Security


      
      | **Jose Palazon**
      | **Michael Smith**
      | Sagittal AI

   |

   |

|

National Institute of Standards and Technology

|


.. |nccoenistlogos| image:: ../_themes/nccoe_rtd_theme/static/img/nccoe-logo.svg

.. |doclogo| image:: ../_themes/nccoe_rtd_theme/static/img/department-of-commerce-small.png
   :width: 1.27153in
   :height: 1.24861in



.. toctree::
   :maxdepth: 4
   :glob:

   executive-summary
   

.. toctree::
   :maxdepth: 4
   :glob:
   :numbered:

   introduction
   notational-reference-model
   mapping-ssdf
   example-implementations
   functional-demonstrations
   next-steps
   

.. toctree::
   :maxdepth: 4
   :glob:

   appendix-a
   appendix-b
   appendix-c
   appendix-d
   appendix-e