Time to Move from DevOps to DevSecOps, Finds Latest CIO Survey

Time to Move from DevOps to DevSecOps, Finds Latest CIO Survey

While automation tools are still the most prevalent, DevSecOps and microservices gained traction over Containers/ FaaS.

Time to Move from DevOps to DevSecOps, Finds Latest CIO Survey

Organizations are adjusting roles and responsibilities to cope with both the agility and security requirements that accompany these new environments. More than 90% of respondents reported that their organizations have Development Operations (DevOps) or DevSecOps teams. These teams [DevSecOps + DevOps] are relatively new with only 21% of respondents reporting DevSecOps teams in place for longer than 24 months.

Read More: Data Assets at Risk from IT Security Misvaluation

More than half (58%) of organizations reported a ratio of between 1:6 and 1:10 DevSecOps to development personnel. When evaluating collaboration between DevOps and DevSecOps teams, 49% said the teams were working very closely while 46% said they were managing to work together.

At the time of this announcement, Anna Convery-Pelletier, Radware’s Chief Marketing Officer, said, “We are at an inflection point culturally between the role of DevSecOps and the CISO. Our research shows that respondents— regardless of title— feel that they have control over their security posture. Yet 90% of organizations still experienced lost data. This is a contradiction that speaks to the organizational differences between DevSecOps and traditional IT security roles. While the CISO’s organization is faced with responsibility for keeping the organization secure at all costs, the DevSecOps teams recognize that agility is critical to business operations, and so they are often forced to take a ‘good enough’ approach.”