Mustafa Kapadia, Gene Kim (IT Revolution), Dave Mangot (Mangoteque) & James Wickett (DryRun Security)
I'm consulting with a new company and using this as a resource to help them move towards automated pipelines to improve their compliance and interactions with auditors
Kevin, Omnitech Engineer
Many organizations often get stymied when dealing with information security, compliance, and audit requirements. There seems to be a misconception that DevOps practices won’t work in organizations which are under SOX or PCI regulations. In this 2015 Forum paper, seven experts provide high-level guidance on three major concerns about DevOps Practices: DevOps and Change Control, DevOps and Security, DevOps and Separation of Duties.
What's inside
Expert Guidance — Seven experts in information security and software delivery provide high-level guidance on the three major concerns of DevOps practices.
Mythbuster — This paper busts the misconception that DevOps doesn’t work in highly regulated industries.
Audit/Compliance — Breaks down how DevOps and Audit/Compliance are not at odds with each other, but can actually work together.
Shift Left on Security — This paper shows how implementing a secured delivery pipeline will allow organizations to ensure better security control, less risk, and better compliance.
Gene KimFounder, Author, Researcher, IT Revolution▼▲
Gene Kim has been studying high-performing technology organizations since 1999. He was the founder and CTO of Tripwire, Inc., an enterprise security software company, where he served for 13 years. His books have sold over 1 million copies—he is the WSJ bestselling author of The Unicorn Project and The Phoenix Project Graphic Novels , and co-author of The Phoenix Project , The DevOps Handbook , Vibe Coding , and the Shingo Publication Award-winning books Accelerate and Wiring the Winning Organization . Since 2014, he has been the organizer of DevOps Enterprise Summit (now Enterprise Technology Leadership Summit and Enterprise AI Summit), studying the technology transformations of large, complex organizations.
Dave Mangot (DevOps Patterns for Private Equity) helps private equity portcos get good at delivering software. He is a leading consultant, author, and speaker as the principal at Mangoteque. A DevOps veteran, Dave has successfully led digital, SRE, and DevOps transformations at companies such as Salesforce, SolarWinds, and Cable & Wireless. He has a proven track record of working with companies to quickly mature their existing culture to improve the speed, frequency, and resilience of their software service delivery.
