Hot Button 2016: How DevOps and Automation Bolster Security and Compliance

as 2016 has arrived, we reflect upon one of the most debated issues around devops in 2015 – information security (infosec) and compliance. needless to say, both are critical to an enterprise (especially given past examples of data breaches and looming cyber-security threats). as a result, the combination of infosec and devops practices can be viewed as counter-intuitive, since the ability to “go faster” can be seen as a potential risk to security mechanisms in place, and thus harder to ensure compliance and enable audibility.

however, we repeatedly heard a different story in 2015 – infosec teams are embracing devops as the practice that enables – and enforces – security and compliance requirements. but how?

to answer this question, i had the pleasure of working with techbeacon on a new story for the ‘new year’ that outlines the different ways of how devops is increasingly underpinning the security blanket for enterprise it organizations. in fact, devops provides a huge opportunity for better security across an entire company. many of the practices that come with devops, such as automation, emphasis on testing, faster feedback loops, improved visibility, collaboration, consistent release practices, and more, are fertile ground for integrating security and audit capabilities as a built-in component of your devops processes.

for the 9 ways that i think devops and automation bolster security and compliance, read the article on techbeacon »

if you want to hear what other experts are saying on the subject, be sure to check out episode 29 of our continuous discussions (#c9d9) video podcast where we talk with james deluccia and jonathan mcallister about “security & compliance as part of your devops processes.”