If there is anything that keeps cloud development leaders up at night, it’s the fact that the risk of an impending security breach is scarily high. If I go around the room at any enterprise development meeting, devops engineers, cloud developers, and cloud architects all see a company-debilitating breach as inevitable.
Enterprise Strategy Group recently completed a cloud threat detection and response research project with interesting results. First, what we already understand: 80% of organizations have adopted a devops model, and 75% push new software builds to production at least once a week. The top challenges include not having enough visibility and control within the development process, software released without security checks, and inconsistent security processes across development teams. I would add supply chain concerns as well.