DevSecOps Gains Enterprise Traction

Enterprise adoption of DevSecOps has surged in the past year, according to a study conducted at this years RSA Conference.

DevSecOps is a great portmanteau word, but is it a concept in wide use? According to a survey of attendees at this years RSA Conference, its not yet universal, but many more organizations are now embracing at least some DevSecOps principles than was the case even a year ago.
The survey, conducted by Aqua Security, asked IT security professionals attending the San Francisco conference questions about whether their organizations were using DevSecOps principles and, if so, some of the details of that use.
In all, 63% of the participants said they have a formal or informal DevSecOps team in place. According to Andy Feit, VP, go-to-market, at Aqua Security, the informal part is important.
That means they dont have to have a director, but they can say that they use some DevSecOps activities, Feit says. We talk to a lot of organizations every day, but we dont always find a person who has DevSecOps on their business card.
No matter how you define the word, though, its expansion has been impressive. Last year only 13% of a similar pool of respondents reported they had a DevSecOps team in place; less than a year later, that number has skyrocketed to 62%, Feit says.
Perhaps more important, he says, is that a healthy percentage of the individuals responding said that their organizations were committing resources to the DevSecOps effort. Sixty perfect said they have the people and the money, he says, adding that another 10% said they have the people but not the money, while 11% said they have the money but not the people.
Asked why so many organizations feel its important to move in the direction of DevSecOps, Feit talks about the effort to have security shift left in the application creation and deployment process. When you ask why people deploy DevSecOps, applying security across the app life cycle is No. 1, and shifting security left is No. 2, he says.
The most critical factor in DevSecOps expansion, Feit says, is the unending need for speed in getting applications in front of users. Everyones trying to move more quickly through the process. They dont want to get things done and then get into a wait state, he says.
Still, the embrace of DevSecOps is not universal. In response to a Twitter query on DevSecOps deployment, Twitter user @p3l was succinct: | sed -e s/sec// he tweeted.
Related content:
6 Tips for Building a Data Privacy Culture
Automation Exacerbates Cybersecurity Skills Gap
Trust: The Secret Ingredient to DevSecOps Success
From DevOps to DevSecOps: Structuring Communication for Better Security
DevOpsSec: A Big Step in Cloud Application Security
Doh!!! The 10 Most Overlooked Security Tasks

Top industry experts will offer a range of information and insight on who the bad guys are – and why they might be targeting your enterprise. Click for
more information

Last News
▸ Travel agency fined £150,000 for breaking Data Protection Act. ◂ Discovered: 23/12/2024 Category: security	▸ 7 arrested, 3 more charged in StubHub cyber fraud ring. ◂ Discovered: 23/12/2024 Category: security	▸ Nigerian scammers now turning into mediocre malware pushers. ◂ Discovered: 23/12/2024 Category: security

**Cyber Security Categories**
Google Dorks Database	Exploits Vulnerability	Exploit Shellcodes

CVE List

Tools/Apps

News/Aarticles

Phishing Database

Deepfake Detection

Trends/Statistics & Live Infos

Tags:
DevSecOps Gains Enterprise Traction