How Can You Be More Successful in a Compliance Conversation With DevSecOps?

Recently, I was facilitating a Value Stream Mapping exercise with one of our clients and they added a process to their enhancements value stream for "NFT - Security" and then added metrics to indicate that this step in the process could take anything from 3 days to 3 months. This was the major factor that caused their cycle time to have a variance of from 19 to 124 days and could add up to $8,000 to the delivery cost of a single enhancement.

And then they said that thing, that thing I’ve heard too many times before: