What is an agile set of focused security and privacy practices that are used by Instana?

IBM Instana Observability is developed and managed using the IBM Security and Privacy by Design (SPbD) process. This methodology is explicitly defined as an agile set of focused security and privacy practices. It integrates threat modeling, privacy assessments, static and dynamic security testing, and vulnerability management directly into the development lifecycle. This ensures that security and privacy are fundamental components from the initial design phase through deployment and operations, rather than being addressed as an afterthought.

B. Agile Security Practice: This is a generic term. While SPbD is an agile practice, "Security and Privacy by Design" is the specific, formal name for the methodology used by IBM for products like Instana.

C. Security Orchestration, Automation, and Response: SOAR refers to a category of security solutions that help manage and respond to security incidents, not a set of development practices for building secure software.

D. DevSecOps: DevSecOps is a broad cultural philosophy that integrates security into the DevOps pipeline. SPbD is the specific set of practices and processes that IBM implements to achieve DevSecOps.

1. IBM Documentation. (2023). Security and Privacy by Design (SPbD) at IBM. IBM Instana Observability on SaaS. Retrieved from https://www.ibm.com/docs/en/instana-observability/current?topic=saas-security-privacy-by-design-spbd-at-ibm.

Reference Point: The first paragraph explicitly states, "IBM Instana Observability on SaaS is developed and managed by using the IBM Security and Privacy by Design (SPbD) process. SPbD at IBM is an agile set of focused security and privacy practices..." This directly answers the question.