I'm writing about the arrival of DevOps practices such as continuous integration (CI) and continuous delivery (CD) and their impact upon SecOps (or whatever the equivalent team was called). My audiences are SecOps and DevOps professionals who are familiar with industry tools and terminology.
I'm looking for a resource, such as interviews with Security professionals, that describe the impact this had upon security practices. Specifically, the context would be small to medium-sized organizations (approximately 25 to 5000 FTEs) with one or more dedicated software development teams that reorganized as DevOps and implemented CI/CD.
Also, if you would like to share your experiences, I would appreciate hearing about them here. Please describe the organization at a high level; which DevOps practices were adopted/discontinued; which SecOps practices were adopted/discontinued; and particularly any key challenges and how they were overcome.
I know some SE groups are sensitive about receiving open-ended questions like this. However, I think it would be valuable for other visitors to read about and generalize from your professional experiences. If you feel like this question should be placed in a different forum, please let me know and I'll be glad to move it there.