Understanding DevSecOps
What is DevOps, anyway?
The word "DevOps" is a mashup of "development’ and "operations" but it represents a set of ideas and practices much larger than those two terms alone, or together. DevOps includes security, collaborative ways of working, data analytics, and many other things. But what is it?
DevOps and the application lifecycle
Accelerate time to market
Through increased efficiencies, improved team collaboration, automation tools, and continuous deployment--teams are able to rapidly reduce the time from product inception to market launch.
Improve the mean time to recovery
The mean time to recovery metric indicates how long it takes to to recover from a failure or breach. To manage software failures, security breaches, and continuous improvement plans, teams should measure and work to improve this metric.
Adapt to the market and competition
A DevOps culture demands teams have a customer-first focus. By marrying agility, team collaboration, and focus on the customer experience, teams can continuously deliver value to their customers and increase their competitiveness in the marketplace.
Collaboration, visibility, and alignment
DevOps culture is collaboration between teams. Collaboration starts with visibility.
Maintain system stability and reliability
By adopting continuous improvement practices, teams are able to build in increased stability and reliability of the products and services they deploy
Shifts in scope and accountability
As teams align, they take ownership and become involved in other lifecycle phases—not just the ones central to their roles
Implement DevOps practices
CI/CD
Configuration management
Version Control
Continuous monitoring
development
Planning
Infrastructure as code
Security
Security is automated
integrate security measures with minimal disruption to operations, keep up with innovative technologies like containers and microservices
Containers and microservices
The greater scale and more dynamic infrastructure enabled by containers have changed the way many organizations do business
Security is built-in services
application and infrastructure security from the start, automating some security gates to keep the DevOps workflow from slowing down
DevSecOps and Infrastructure
