Agile and Touchless Automation in the software industry

Secure Change Management Process: On the Effectiveness of DevSecOps

“…Modern digital software development and production has come to a closed-loop DevOps production culture, having passed through Waterfall, Agile, CI/CD (Continuous Integration/ Continuous Delivery) stages [17][18][19][20][21][22]. At the same time, there are both methodological differences in these iterative methods of digital software production (Figure 1), and systemic-production-culture-wide differences in digital development and manufacturing (Figure 2 Currently, the outlined methodological approaches in digital manufacturing are found in the individual processes of modern organizational and management schemes of software development and manufacturing, which are either modernized with modern tools or have a combinatorial nature of functional operation.…”

“…An extensive analysis of profile papers and publications by authors R. G. Lennon [50], S. R. Goniwada [51], J. Faustino [52], M. A. Shameem [53], W. R. Nichols [54], K. A. Rassmann [55], J. Díaz [56], allows us to identify the benefits of implementing DevSecOps tools in traditional software production processes (Figure 12): -improvement of the software product quality at the customer (higher customer value), due to the optimization of the processes of andate and software kernel updates, taking into account the increase of security qualities; -reduced time spent on cybersecurity testing procedures (reduced time for security checks), due to the high level of automation of test operations in the DevSecOps system; Informational and analytical review of publications by M. A. Akbar [58], T. Scanlon [59], C. W. Carol Woody [60], D. W. Hallock [61], K. Siau [62] regarding the hindering reasons in the full implementation of DevSecOps organizational and management system in software-digital production processes, points out that although DevSecOps offers a new methodology to solve problems between DevOps and cybersecurity, and makes security a task for everyone in the development process, transition from DevOps to DevSecOps is not easy and requires a culture or mindset change, new management, work processes and process must be established, and new technology must be adopted. Here, the challenge of implementing DevSecOps breaks down into two major challenges: -technical problem of DevSecOps implementation; -the corporate-developer problem of DevSecOps implementation.…”