Page 68 - CDM-CYBER-DEFENSE-eMAGAZINE-December-2018

Cybersecurity in The Era of Agile Software Development – Part 2 - (Devops &
Devsecops)

By Ivan De Los Santos

As technology continues to be incorporated into more products and services, the race to deliver customer
value fast is changing the software development landscape. In part 1 of this series (Oct edition), we
discussed how agile software development is changing the organizational structure of software delivery
teams and entire organizations. Agile methodologies allow organizations to respond rapidly to change;
however, this is not enough. More is needed in order to deliver software quickly and with less error.
Welcome to DevOps!

“DevOps is a combination of cultural philosophies, practices, and tools that increases an

organization’s ability to deliver applications and services at high velocity; evolving a product at a faster

pace than organizations using traditional software development and infrastructure management

processes” Amazon Web Services

DevOps applies software engineering principles to infrastructure and operations. Fast software delivery
through automation is at the core of DevOps. Development and Operations become one team or work
side-by-side, thus helping to reduce the friction points that have plagued them for years. This is the case
where development teams would develop software and “throw it over the wall” to operations. It was up to
operations to make it work. Moreover, operations were never capable to provide development teams with
production like development environments. These issues were at the core of poor software delivery
practices.

68