CHAPTER 9Conclusion
INTRODUCTION
While DevOps has been around for some time now and is reaching maturity in many organizations, DevSecOps is still in its infancy. Companies that are able to bring DevOps principles to cybersecurity will reap the benefits seen from DevOps and have the opportunity to leapfrog their competition. By implementing DevSecOps, companies have the opportunity to deliver at speed without sacrificing security.
Of course, implementing DevSecOps is easier said than done. DevSecOps requires that people fundamentally change how they approach security. DevSecOps requires that they change how they work and what they do on a day‐to‐day basis. Security practitioners must move from implementing security to implementing security platforms; they must move from an enforcer of security gates to an advocate of security best practices. But, if you, as a security practitioner, are along for that journey and are ready to transform, the benefits that you can provide to your company are tremendous. Not only will your company benefit, but by leveraging these practices, you will propel your career forward.
PEOPLE, PROCESS, AND TECHNOLOGY
DevSecOps affects all elements of how people work, from the tools they use to the roles they take on. To truly do DevSecOps, you must change all the elements of your business from people to process to technology.
People must fundamentally change how they work to build collaboration across all teams and aspects of technical delivery. The ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access