Building security into the System Development Life Cycle (SDLC) is a basic security principle, but one not always well followed. When it is, the result speaks for itself: a more secure system. For CGI, following this “security first” principle enabled us to become the first certified Cloud Service Provider (CSP) to deliver secure cloud services under GSA’s Blanket Purchase Agreement (BPA) for Infrastructure as a Service (IaaS). Our approach also makes it easier to comply with new forthcoming FedRAMP requirements. More...