According to the business type and internal organization we implement a full framework of technical and ownership practices, tools and transformational activities that will harmonize development activitites as a Secure Software Development Life-cycle.

Our goal is to design simple processes and their respective governance to make everyone’s life easier, while ensuring a company’s wide compliance with the industry’s good practices and security standards. It includes:

• Analysis of the “as-is” situation of development practices of your company
• Organization proposal to harmonize software development practices within your company
• Creation of the development standards & good practices for your internal and external talents
• Software process deliverables for product owners, developers and technical leaders
• Design of a Secure Software Development Life-Cycle framework with toolkits, charters and guidelines for the team to follow an easy and unique development process

ISO 27001 A.14

• Training to your product and technical teams on the ISO 27001 A.14 control points
• Design of your SDLCs to be compliant by design with ISO 27001 A.14 control points
• Organizational improvement for compliance
• Creation of a risk assessment system for risk & technical incident management
• Coordination of the teams and evidences gathering
• Control points compliance monitoring

The world is constantly changing, consequently the development of our applications, websites or digital platforms must be similarly flexible to meet both users and business needs.

We drive your teams to become more agile by working in iterations and accepting that they must consider shorter scopes, because they cannot foresee everything in advance.

There are many different methodologies, but each team should find the right one according to the software type and their organization.

Choosing the right one amongst the 40+ agile methodologies can be quite difficult, which is why we will guide the teams as follows:

• Introducing the 3 main methodologies categories for your project, software management and corporate organization
• Training the teams on the recommended agile methodologies for your company
• Supporting the organizational transformation and new process adoption
• Designing evolutive best practices for your teams

DevSecOps

DevSecOps is a philosophy of work and collaboration sponsoring the creation of an environment where information can flow freely between the different technical streams of development, security and operations.

The goal of DevSecOps is to produce software fast, efficiently, in a secure manner whilst creating an environment that is optimal for the teams.

DevOps is a combination of Development and Operations. It was first coined to emphasize the need to break silos and to encourage the collaboration between these 2 different streams.

With DevSecOps, another dimension is added: Security because testing should be done from the preparation phase and until the end of the development cycle.

This shift in process and culture can be challenging to implement, but the right tools and patterns can help us orchestrate this change.

Agile and DevSecOps are oftentimes complementary and together they aim to help us quickly build quality software in a favorable environment for the teams.

Product Ownership

Product ownership is a mindset and practices supporting the product team to build a software as attratctive and secure as possible.

The drivers for a product-oriented team are user experience, quality, and security. It must bring value back (either capital, more users adoption, business plan validation etc).

Product Ownership is an accountability to oversee the full life-cycle of the the product while continously gathering functional and non-functional requirements from the internal and external stakeholders.

Product owners understand and translate the needs of the users, the business and the technical teams.

Their main concern is and must always be “the product’s success”.

Product Owners are in charge of the full product lifecycle: evaluation and prioritization of product backlogs, design, integration/development, testing, release, improvement, and sunsetting.

The Heraclea team will partner with your teams to support them to take ownership of their software:

• Trainings on product ownership practices
• Introduction of those practices into the delivery life-cycle of the softwares
• Design of a toolkit to drive the teams to consider all essential aspects, documentation and steps
• Evolutive support along the learning curve of the teams

User research: We use different methods that aim to study the behaviors and needs of users.

We gather feedbacks, interviews and tests to better understand, evaluate and improve the user experience of digital products and services.This is an important step for the development of a sustainable product, as it ensures that the system is designed in the right way for its audience.

Software business analysis: The business analysis allows us to find technical solutions to business challenges.

We determine the requirements of a software and clearly communicate them to stakeholders.

In addition, we define, analyze and document the requirements. This includes studying the business as a whole and the information needs of the organization.