GovLoop

DevSecOps at a Glance

This blog post is an excerpt from our new report, Integrating Security From End to End With DevSecOps, download the full version here.

At its core, DevSecOps is “a cultural and engineering practice that breaks down barriers and opens collaboration between development, security and operations organizations using automation,” according to the General Services Administration’s definition. The focus is on rapid, frequent delivery of secure infrastructure and software to production, which a growing number of agencies are prioritizing.

The purpose and intent of DevSecOps is to build on the mindset that everyone is responsible for security with the goal of safely distributing security decisions at speed and scale.

“Something that helped the adoption of DevSecOps was to increase collaboration to create an environment of sharing.”

– Darryl Peek, Director of Digital, Innovation and Solutions, Department of Homeland Security

These stats will help illustrate the growth of DevSecOps and set the context for why this practice is more important than ever for governments at all levels.

30 times faster

Today’s high-performing IT teams using DevOps practices deploy code up to 30 times faster, experience 60% fewer failures and recover from development issues 168 times faster than their peers, according to a recent report.


338% more

Mature DevOps practices are 338% more likely to integrate automated security, according to the 2018 DevSecOps Community Survey.


75% of CIOs

In the 2017 Federal CIO Survey, 75% of CIOs identified DevOps as a top priority.


48% of developers

Developers said they understand the importance of security though 48% reported they don’t have enough time to spend on it, according to the 2018 DevSecOps Community Survey.


73% of organizations

Out of 73% of organizations surveyed in the 2018 DevSecOps Survey, 33% suffered verified breaches stemming from vulnerabilities in open source components or web applications within the last 12 months. These and other high-profile breaches led 73% of respondents to affirm an increased interest in DevSecOps practices, including increased investment and implementation.


56% with a mature DevOps practice

While 56% of respondents with a mature DevOps practice rated container and application security tools as critical to their organizations in the 2018 DevSecOps Survey.


$5.9 billion growth

The DevSecOps market is expected to expand at a compound annual growth rate of 31.2% from $1.5 billion in 2018 to $5.9 billion in 2023.

To learn more about how leading governments are working to integrate security into their DevOps practices and culture, download our full report here

Exit mobile version