DevOps Automated Governance Reference Architecture

As more and more DevOps practices are automated, it becomes harder to capture the data required to ensure all security and compliance concerns are met.

Organizations need an automated way to track governance throughout the entire software delivery process so they can attest to the integrity of all assets and to the security of all running applications.

This paper is intended to guide organizations on implementing an automated process for tracking governance throughout the deployment pipeline by providing a reference architecture to help guide organizations on how to design and implement automated governance throughout the delivery pipeline.

A sample use case is also provided to further enforce these best practices.

What's inside

• Speed and Quality — This paper debunks the myth that to gain speed in software delivery you must sacrifice quality and compliance.
• Expert Authors — This paper is written by experienced practitioners and leaders from the audit, security, and compliance world across industries.
• Clear Guidance — Provides a clear architecture for enterprise organizations to develop their own automated systems of audit, compliance, security, and governance.
• Evidence-Based — This paper provides clear evidence via case studies from across industries that have successfully implemented automated governance systems.