Where can I find professional insights into the impact of DevOps upon SecOps?

Question

I'm writing about the arrival of DevOps practices such as continuous integration (CI) and continuous delivery (CD) and their impact upon SecOps (or whatever the equivalent team was called). My audiences are SecOps and DevOps professionals who are familiar with industry tools and terminology.

I'm looking for a resource, such as interviews with Security professionals, that describe the impact this had upon security practices. Specifically, the context would be small to medium-sized organizations (approximately 25 to 5000 FTEs) with one or more dedicated software development teams that reorganized as DevOps and implemented CI/CD.

Also, if you would like to share your experiences, I would appreciate hearing about them here. Please describe the organization at a high level; which DevOps practices were adopted/discontinued; which SecOps practices were adopted/discontinued; and particularly any key challenges and how they were overcome.

I know some SE groups are sensitive about receiving open-ended questions like this. However, I think it would be valuable for other visitors to read about and generalize from your professional experiences. If you feel like this question should be placed in a different forum, please let me know and I'll be glad to move it there.

Answer 1

As alluded to by Tensibai ♦, I think the answers you are looking for start from my answer to "What is SecOps?", specifically from the "Further Reading" section:

• DevOpsSec by Jim Bird
• DevSecCon: A DevSecOps Conference
• Velocity EU: Continuous Security

Of the above I am currently reading Jim Bird's book, have had the pleasure of working with the organiser of DevSecCon in a previous role and had the privilege of attending the Velocity Session in Amsterdam last year.

I would advise you to reach out to Francois Raynaud and ask the question of him, he has worked in the space for a long time and is really helping the community evolve as part of DevOps.

Beyond my links, the O'Reilly Security Conference has published videos on Safari Books Online:

• 2016
  • New York, NY
  • Amsterdam, Netherlands
  • San Francisco, California