November 10, 2021

Integrated DevSecOps with separate Federal Dev and Ops contractors? Yes, it can be done.

by Dr. Robert Buccigrossi, TCG CTO DevSecOps offers great potential for improving Federal IT practice by integrating development, security, and production performance as shared goals of a single IT team. The overall philosophy is that a unified team will naturally embrace practices…
November 9, 2021

Will We Make the Sprint? Simulate it with Monte Carlo!

by Dr. Robert Buccigrossi, TCG CTO Piquing My Interest – When I read the title “How to replace estimations and guesses with a Monte Carlo simulation”, I got really excited: Of course I would love to learn how to avoid project estimation! While the…
July 29, 2021

Filling a Gap in Federal DevSecOps

Keeping your entire organization focused on security with one data visualization tool. As shown by recent security breaches such as the Solarwinds hack and the ransomware attack on the Colonial Pipeline, effectively managing security vulnerabilities is important and difficult. But…
July 27, 2021

The Rise of “Simple” Kubernetes

by Dr. Robert Buccigrossi, TCG CTO Canonical (the organization behind Ubuntu Linux) has just announced MicroK8s (Micro-Kubernetes). Why should we care? Containers Can Make Deployment Easier — Well, speaking as a system administrator, setting up and managing machines is a pain, whether…
June 23, 2021

Agile certifications — what will take you to the next level?

By Tige Nishimoto, TCG Program Manager Scrum Master certification is the most in-demand Agile certification on the marketplace, but it’s quickly becoming table stakes as Agile is expanding beyond IT and DevOps, according to Stephen Townsend, Director for Network Programs…
January 27, 2021

Strategies for Making Agile Process and Design Thinking Work Together

For many years, designers and developers have been debating the compatibility of user-centered design principles and Agile development processes. In 2018, one of the foremost experts on user centered design, Don Norman, said “the new Agile programming methods are very…
April 13, 2020

No, You Don’t Need Kubernetes for DevSecOps

By Robert Buccigrossi, TCG CTO If you google “DevSecOps”, you will find many references to deployment pipelines, and one of the most popular is from AWS (depicted in the diagram on the below). The pipeline involves many quickly evolving technologies…
March 10, 2020

Faster OpenVAS Vulnerability Scanning

By Robert Buccigrossi, TCG CTO OpenVAS is a system vulnerability scanner that checks visible ports, services it can access for known exploits, and high level web threats (like cross-site script vulnerabilities and improper file access). The TCG Tech Team uses it…
March 4, 2020

DevOps: a Top-Level View

By Robert Buccigrossi, TCG CTO There are myriad approaches, tools, and goals associated with the term “DevOps”. Inspired by a recent webinar I attended that presented a rather abstract view of DevOps, I went on a hunt for a concise synopsis of the term that covered…
January 23, 2020

Yes, You Can Run Docker AND Virtualbox on Windows 10 Home

By Al Crowley, TCG Principal Engineer Running Docker containers on a Windows 10 PC has been difficult for the last few years. It’s even more difficult if you want to run VirtualBox virtual machines (VM) at the same time. A casual Google…