Welcome!

Artificial Intelligence Authors: Liz McMillan, Yeshim Deniz, Zakia Bouachraoui, Pat Romanski, Elizabeth White

Related Topics: @CloudExpo, Microservices Expo, Linux Containers, @DevOpsSummit

@CloudExpo: Article

Islands Are Wasteful in #DevSecOps | @DevOpsSummit @CAinc #DevOps #DX

DevSecOps is about breaking down silos and waste along the software development lifecycle

DevSecOps - a trend around transformation in process, people and technology - is about breaking down silos and waste along the software development lifecycle and using agile methodologies, automation and insights to help get apps to market faster. This leads to higher quality apps, greater trust in organizations, less organizational friction, and ultimately a five-star customer experience.

These apps are the new competitive currency in this digital economy and they're powered by data. Without data or data-based interactions, these apps would be of little value to the user and would be just static one-dimensional bulletin boards. Imagine a banking app, for example, that does not give you data about your account or let you take some action. How much value is this bringing to the user?

IT's dirty little secret
Most companies, with the exception of recently born-in-the-cloud "unicorns," know that critical data resides in many different systems-of-record that have persevered through infrastructure refresh cycles or have been added via mergers and acquisitions. A dirty IT secret is that systems-of-record rarely go away as new ones are added, so coexistence is the unspoken reality. The apps you are speeding to market are - or should be - capable of interacting with many legacy code bases.

This legacy code base reality has implications for your organization, processes and tools as you apply DevOps principles. Here are three imperatives for every IT leader managing multiple code bases to build the right foundation for their Modern Software Factory.

  1. Break down your infrastructure-based operational silos. Every organization has specialized individuals who have specific knowledge of certain code bases and infrastructure types. Do your best to break down those reporting silos and infrastructure-based management fiefdoms. For example, have your Windows, Linux, Unix, AS-400, mainframe and even cloud system admins report to the same managers. Don't isolate your "legacy" Dev or Ops teams on an island as the data that resides on those "legacy" platforms is vital to your current and future apps. This practice will speed decision-making and reduce organizational friction, while also helping to overcome retention and talent shortage issues.
  2. Make your DevOps processes and tools inclusive of all your code bases and infrastructure types. Having a separate set of AppDev or DevSecOps tools and processes for each type of infrastructure or code base is antithetical to the business outcomes you want to achieve. This also reinforces silos - in this case, hardware and operating system silos - rather than breaking them down. You can't afford different ALM, release automation, service virtualization, test data management, app security testing, privileged access management, automation, APM or infrastructure management toolchains. Not only is software license duplication expensive but so are the supporting costs to host, maintain, learn, manage and upgrade those tools. That is wasteful and inhibits your ability to fund innovation. Steer clear of vendors pushing point tools that reinforce islands of infrastructure and the lock-in that results. Always ask if that DevOps-enabling software works across your infrastructure.
  3. Use modern app architectures like APIs and Microservices. With APIs, developers can leverage data and build integrations between disparate systems faster and with fewer errors. With this approach, your APIs need to be adequately catalogued, which is more often than not an area developers glance over, to be used by teams across code base and infrastructure types. Microservices also allow for parallel development by enabling small autonomous teams to develop, deploy and scale their respective services independently. Monolithic architectures and hard-coded data paths should be a relic of the past.

There's a lot to learn about DevSecOps as it's a dynamic and evolving practice with many nuances. Flexible app architectures, heterogeneous tool chains and inclusive organizational structures can eliminate islands, unnecessary costs and friction as you advance on your DevSecOps journey.

More Stories By Cameron Van Orman

Cameron Van Orman is vice president for solution and product marketing and enterprise management at CA Technologies. He leads a team of 20 people who together devise strategy for the business unit and develop all aspects of product marketing. Cameron and his team also lead the way for early product adoption in enterprise management.

Comments (0)

Share your thoughts on this story.

Add your comment
You must be signed in to add a comment. Sign-in | Register

In accordance with our Comment Policy, we encourage comments that are on topic, relevant and to-the-point. We will remove comments that include profanity, personal attacks, racial slurs, threats of violence, or other inappropriate material that violates our Terms and Conditions, and will block users who make repeated violations. We ask all readers to expect diversity of opinion and to treat one another with dignity and respect.


IoT & Smart Cities Stories
CloudEXPO New York 2018, colocated with DXWorldEXPO New York 2018 will be held November 11-13, 2018, in New York City and will bring together Cloud Computing, FinTech and Blockchain, Digital Transformation, Big Data, Internet of Things, DevOps, AI, Machine Learning and WebRTC to one location.
Andrew Keys is Co-Founder of ConsenSys Enterprise. He comes to ConsenSys Enterprise with capital markets, technology and entrepreneurial experience. Previously, he worked for UBS investment bank in equities analysis. Later, he was responsible for the creation and distribution of life settlement products to hedge funds and investment banks. After, he co-founded a revenue cycle management company where he learned about Bitcoin and eventually Ethereal. Andrew's role at ConsenSys Enterprise is a mul...
The best way to leverage your Cloud Expo presence as a sponsor and exhibitor is to plan your news announcements around our events. The press covering Cloud Expo and @ThingsExpo will have access to these releases and will amplify your news announcements. More than two dozen Cloud companies either set deals at our shows or have announced their mergers and acquisitions at Cloud Expo. Product announcements during our show provide your company with the most reach through our targeted audiences.
DXWorldEXPO | CloudEXPO are the world's most influential, independent events where Cloud Computing was coined and where technology buyers and vendors meet to experience and discuss the big picture of Digital Transformation and all of the strategies, tactics, and tools they need to realize their goals. Sponsors of DXWorldEXPO | CloudEXPO benefit from unmatched branding, profile building and lead generation opportunities.
Disruption, Innovation, Artificial Intelligence and Machine Learning, Leadership and Management hear these words all day every day... lofty goals but how do we make it real? Add to that, that simply put, people don't like change. But what if we could implement and utilize these enterprise tools in a fast and "Non-Disruptive" way, enabling us to glean insights about our business, identify and reduce exposure, risk and liability, and secure business continuity?
DXWorldEXPO LLC announced today that Telecom Reseller has been named "Media Sponsor" of CloudEXPO | DXWorldEXPO 2018 New York, which will take place on November 11-13, 2018 in New York City, NY. Telecom Reseller reports on Unified Communications, UCaaS, BPaaS for enterprise and SMBs. They report extensively on both customer premises based solutions such as IP-PBX as well as cloud based and hosted platforms.
Digital Transformation: Preparing Cloud & IoT Security for the Age of Artificial Intelligence. As automation and artificial intelligence (AI) power solution development and delivery, many businesses need to build backend cloud capabilities. Well-poised organizations, marketing smart devices with AI and BlockChain capabilities prepare to refine compliance and regulatory capabilities in 2018. Volumes of health, financial, technical and privacy data, along with tightening compliance requirements by...
In this Women in Technology Power Panel at 15th Cloud Expo, moderated by Anne Plese, Senior Consultant, Cloud Product Marketing at Verizon Enterprise, Esmeralda Swartz, CMO at MetraTech; Evelyn de Souza, Data Privacy and Compliance Strategy Leader at Cisco Systems; Seema Jethani, Director of Product Management at Basho Technologies; Victoria Livschitz, CEO of Qubell Inc.; Anne Hungate, Senior Director of Software Quality at DIRECTV, discussed what path they took to find their spot within the tec...
To Really Work for Enterprises, MultiCloud Adoption Requires Far Better and Inclusive Cloud Monitoring and Cost Management … But How? Overwhelmingly, even as enterprises have adopted cloud computing and are expanding to multi-cloud computing, IT leaders remain concerned about how to monitor, manage and control costs across hybrid and multi-cloud deployments. It’s clear that traditional IT monitoring and management approaches, designed after all for on-premises data centers, are falling short in ...
DXWordEXPO New York 2018, colocated with CloudEXPO New York 2018 will be held November 11-13, 2018, in New York City and will bring together Cloud Computing, FinTech and Blockchain, Digital Transformation, Big Data, Internet of Things, DevOps, AI, Machine Learning and WebRTC to one location.