Why Security Pros Should Embrace DevOps

With both Corman and Kim recognizing the value of DevOps, they also realize it's an opportunity for security people to get in on the business success of DevOps.

"Information security can no longer be in the way," said Kim. "They can't wait six weeks for us to do a security review of code."
Security has to adapt or they will simply fail, said Corman.

"Move us from this pre-ordained failure -- this downward spiral where we get more and more insecure, technical debt keep building up -- and actually be a part of the team that's helping the organization win," said Kim.

Luckily, said Corman, DevOps drives the behaviors and patterns infosec people want, such as automation, instrumentation, orchestration, hardening, and driving down complexity. Security needs to be a loving member of developers and operations.
For those organizations that haven't yet started DevOps, Kim agrees it's not something that comes easily.

"It'll be the most fun journey that they'll ever be on, where they're part of a team where our skills and contributions are valued," said Kim. "It's great to be a team. But there's nothing better than being part of a winning team."

With both Corman and Kim recognizing the value of DevOps, they also realize it's an opportunity for security people to get in on the business success of DevOps.

"Information security can no longer be in the way," said Kim. "They can't wait six weeks for us to do a security review of code."
Security has to adapt or they will simply fail, said Corman.

"Move us from this pre-ordained failure -- this downward spiral where we get more and more insecure, technical debt keep building up -- and actually be a part of the team that's helping the organization win," said Kim.

Luckily, said Corman, DevOps drives the behaviors and patterns infosec people want, such as automation, instrumentation, orchestration, hardening, and driving down complexity. Security needs to be a loving member of developers and operations.
For those organizations that haven't yet started DevOps, Kim agrees it's not something that comes easily.

"It'll be the most fun journey that they'll ever be on, where they're part of a team where our skills and contributions are valued," said Kim. "It's great to be a team. But there's nothing better than being part of a winning team."