Many of us have heard this story before, and it goes something like this:
Developers are focused on one thing and one thing only – speed. They expunge anything that gets in their way or slows them down. And they can, because successful DevOps is becoming a core competitive differentiator for many organizations.
Security leaders are focused on one thing and one thing only – risk. They are vigilant with ensuring compliance with enterprise policy and abhor change. And they can, because major cyberattacks and security breaches can become company killers.
It doesn’t take much imagination to picture these two functions at odds with one another. Even InfoSec professionals, 77 percent of them according to Gartner, agree that their own policies slow IT’s ability to respond quickly to the needs of the business. However, the trend among IT leaders is about increasing throughput and speed. A recent study looked at the differences between high and low IT performers and found that high performers deploy code 46x more frequently, have 440x faster lead times from commit and deploy, and are 2x more likely to exceed profitability and market share goals. How can DevOps and InfoSec bridge this divide spanning speed and risk?
Join DevOps pioneer, author, researcher and entrepreneur, Gene Kim, this Wednesday at 2 p.m. ET as he and our own Corey Bodzin discuss how shifting left with security can reduce an organization’s Cyber Exposure. You will learn why “DevOps is awesome for InfoSec” with the ability to integrate security into the development process and be welcomed by developers. Gene will also discuss three ways for InfoSec to partner with DevOps to ensure superior code quality. Finally, Corey will provide an example of a secure DevOps solution today supporting Docker containers that incorporates security as a critical test early into the software development lifecycle.
*** This is a Security Bloggers Network syndicated blog from Tenable Blog authored by Nathan Dyer. Read the original post at: http://feedproxy.google.com/~r/tenable/qaXL/~3/lF0NrBNDP44/is-devops-the-best-thing-to-ever-happen-to-security