{"id":61517,"date":"2021-12-10T11:52:27","date_gmt":"2021-12-10T11:52:27","guid":{"rendered":"https:\/\/www.intelligentcio.com\/eu\/?p=61517"},"modified":"2023-05-25T11:30:37","modified_gmt":"2023-05-25T10:30:37","slug":"devsecops-automation-will-be-key-to-digital-transformation-in-2022","status":"publish","type":"post","link":"https:\/\/www.intelligentcio.com\/eu\/2021\/12\/10\/devsecops-automation-will-be-key-to-digital-transformation-in-2022\/","title":{"rendered":"DevSecOps automation will be key to Digital Transformation in 2022"},"content":{"rendered":"\n<p><em>As we head into a new year, business leaders are seeking to find new ways of preparing their organisations for the technology trends which are set to evolve. Here, Bernd Greifeneder, Founder and CTO of Dynatrace, discusses some of the key trends organisations are likely to face if they intend to continue on their Digital Transformation journeys. <\/em><\/p>\n\n\n\n<p>The past 12 months brought plenty of&nbsp;challenges for IT&nbsp;operations&nbsp;and development teams&nbsp;as they supported&nbsp;the&nbsp;continued move&nbsp;to digital-first services and hybrid work.&nbsp;These challenges are here to stay, but 2022 will undoubtedly bring some&nbsp;fresh&nbsp;problems.&nbsp;Here are&nbsp;the&nbsp;key trends&nbsp;most likely to&nbsp;impact organisations\u2019 ability to keep up with the Digital Transformation imperative.&nbsp;<\/p>\n\n\n\n<p><strong>Developer experience will become&nbsp;mission-critical<\/strong>&nbsp;&nbsp;<\/p>\n\n\n\n<p>In 2022, the talent war will get even hotter as organisations battle to attract and retain the skilled developers needed to drive their Digital Transformation. They will, therefore, find themselves under increasing pressure to offer the best developer experience, to&nbsp;focus&nbsp;their workforce&nbsp;on driving innovation and give them&nbsp;a reason to stay loyal. Development teams&nbsp;should be&nbsp;enabled&nbsp;to work as artists&nbsp;as much&nbsp;as possible,&nbsp;opening up their productivity to build&nbsp;new ways for organisations and their customers to see and experience the world. They shouldn\u2019t be&nbsp;manual laborers who get bogged down in the task of stitching code, infrastructure and databases&nbsp;together to make sure everything works.&nbsp;&nbsp;<\/p>\n\n\n\n<p>To enable this, IT leaders will&nbsp;need to realise that their efforts to improve the developer experience are&nbsp;equal in importance, if not more&nbsp;so,&nbsp;than their ability to optimise customer experiences. They will&nbsp;need to&nbsp;increase their&nbsp;focus on reducing friction in&nbsp;DevSecOps&nbsp;processes and automating as many repetitive&nbsp;tasks as possible.&nbsp;This will enable&nbsp;their developers&nbsp;to&nbsp;invest&nbsp;more of&nbsp;their energy&nbsp;in the work that gets them out of bed in the morning,&nbsp;and less on&nbsp;routine&nbsp;manual tasks&nbsp;\u2013 giving them more reasons to stay.&nbsp;<\/p>\n\n\n\n<p><strong>Data complexity will continue to spiral<\/strong>&nbsp;<\/p>\n\n\n\n<p>In 2022, IT leaders will need to urgently tackle the complexity of the data explosion that\u2019s ensued from the introduction of cloud platforms, as well as new technologies,&nbsp;programming languages and tools in recent years. The volume of observability data that organisations are grappling with is doubling every two years and will be added to even further in the next 12 months by the rising adoption of&nbsp;OpenTelemetry.&nbsp;&nbsp;<\/p>\n\n\n\n<p>IT leaders&nbsp;will&nbsp;need to ensure the task of&nbsp;handling and&nbsp;analysing&nbsp;all this data&nbsp;to&nbsp;provide the insights needed for&nbsp;DevSecOps&nbsp;automation&nbsp;doesn\u2019t&nbsp;fall to&nbsp;their&nbsp;developers,&nbsp;pulling them&nbsp;away from&nbsp;vital innovation&nbsp;work.&nbsp;As such, it will be increasingly important to use&nbsp;standardised&nbsp;and automated approaches to capturing observability data and harness AIOps to analyse&nbsp;it&nbsp;in real-time&nbsp;to&nbsp;unlock&nbsp;the insights developers need to accelerate innovation.&nbsp;<\/p>\n\n\n\n<p><strong>Organisations&nbsp;will begin&nbsp;streamlining&nbsp;automation<\/strong>&nbsp;&nbsp;<\/p>\n\n\n\n<p>In the next 12 months,&nbsp;organisations will&nbsp;begin&nbsp;to address the&nbsp;tangled mess of automation&nbsp;code&nbsp;that&nbsp;was&nbsp;created&nbsp;by their initial efforts to reduce manual&nbsp;development&nbsp;processes.&nbsp;These efforts were driven by automation scripts created on a case-by-case basis and added to workflows as needed. As time progressed, developers used&nbsp;&#8216;copy-paste&#8217;&nbsp;versions of these&nbsp;scripts&nbsp;to&nbsp;quickly and easily&nbsp;add&nbsp;the plumbing&nbsp;to connect&nbsp;more operations, development and&nbsp;automation processes.&nbsp;There is also a huge amount of undocumented&nbsp;automation&nbsp;code&nbsp;that&nbsp;was&nbsp;introduced without much thought&nbsp;for&nbsp;the output.&nbsp;&nbsp;<\/p>\n\n\n\n<p>All of this&nbsp;is making&nbsp;automation&nbsp;increasingly&nbsp;messy, which makes it&nbsp;difficult to realise the value&nbsp;of&nbsp;DevSecOps, as&nbsp;already complex&nbsp;cloud&nbsp;environments&nbsp;become&nbsp;even&nbsp;harder to understand and manage.&nbsp;Developers&nbsp;are forced to&nbsp;waste time updating and fixing&nbsp;their&nbsp;automation&nbsp;scripts&nbsp;over and again,&nbsp;pulling them away from&nbsp;more value-adding tasks such as&nbsp;innovation.&nbsp;As well as adding to their workloads, this also increases the risk of human error&nbsp;derailing&nbsp;DevSecOps&nbsp;pipelines, as developers struggle to maintain consistency across&nbsp;different versions of their&nbsp;automation scripts.&nbsp;To overcome this, we\u2019ll see organisations adopting&nbsp;smarter approaches&nbsp;to&nbsp;DevSecOps&nbsp;automation&nbsp;in the next 12 months. They\u2019ll increasingly look for platforms and solutions&nbsp;that enable them to build&nbsp;automation&nbsp;into their&nbsp;delivery&nbsp;pipelines,&nbsp;rather than manually&nbsp;adding it&nbsp;as an afterthought. This will help&nbsp;to eliminate&nbsp;the reliance on&nbsp;manual copy-paste plumbing&nbsp;and&nbsp;the need for developers to&nbsp;invest time in&nbsp;maintaining&nbsp;fragmented&nbsp;automation scripts.&nbsp;&nbsp;<\/p>\n\n\n\n<p><strong>SRE&nbsp;and&nbsp;DevSecOps&nbsp;will converge&nbsp;<\/strong>&nbsp;<\/p>\n\n\n\n<p>Site reliability engineering&nbsp;(SRE)&nbsp;practices&nbsp;are becoming ever more central to&nbsp;continuous delivery&nbsp;as organisations look to accelerate transformation.&nbsp;As this trend gathers pace in 2022,&nbsp;SRE&nbsp;will&nbsp;move beyond DevOps and&nbsp;become&nbsp;a&nbsp;key&nbsp;part of&nbsp;the&nbsp;DevSecOps&nbsp;movement,&nbsp;as observability&nbsp;converges&nbsp;with security,&nbsp;self-healing and automation.&nbsp;The&nbsp;pain&nbsp;that&nbsp;SRE teams&nbsp;will face&nbsp;is that developers&nbsp;often&nbsp;don\u2019t&nbsp;have&nbsp;enough&nbsp;time to think&nbsp;about self-healing,&nbsp;observability and automation.&nbsp;They\u2019re&nbsp;also&nbsp;only just getting used to&nbsp;having the&nbsp;responsibility&nbsp;for security.&nbsp;As a result, all too often,&nbsp;it&nbsp;falls&nbsp;back on SRE teams&nbsp;to ensure security, self-healing and automation are built in during the development stage.&nbsp;&nbsp;<\/p>\n\n\n\n<p>To address this, SRE teams will&nbsp;increasingly look to&nbsp;enable&nbsp;developers to build&nbsp;services that are&nbsp;reliable&nbsp;and secure&nbsp;by&nbsp;default.&nbsp;Self-service&nbsp;observability solutions&nbsp;and&nbsp;\u2018monitoring as code\u2019 approaches&nbsp;will be key, allowing&nbsp;developers&nbsp;to easily build in&nbsp;observability with just a few clicks.&nbsp;The use of quality and security gates in&nbsp;automated&nbsp;DevSecOps&nbsp;pipelines&nbsp;will&nbsp;also enable developers to ensure their code satisfies&nbsp;service-level objectives that establish&nbsp;the minimum requirements for performance and&nbsp;risk, further easing the burden on both themselves and SRE teams.&nbsp;<\/p>\n\n\n\n<p><strong>NoSOC&nbsp;approaches will gain momentum<\/strong>&nbsp;<\/p>\n\n\n\n<p>There will be another gear shift in development cycles, forcing organisations to lean more heavily on AI and automation to ensure their developers\u2019 code is high-quality and secure. To support this, organisations will increasingly move towards&nbsp;NoSOC-approaches. This will see&nbsp;security&nbsp;teams&nbsp;using&nbsp;observability&nbsp;to&nbsp;increase the context of&nbsp;their&nbsp;own&nbsp;data,&nbsp;improving&nbsp;the&nbsp;precision&nbsp;of the insights it delivers&nbsp;and preventing&nbsp;false positives.&nbsp;They will also look to&nbsp;harness AI to&nbsp;automate&nbsp;more&nbsp;manual processes in security management&nbsp;and&nbsp;achieve faster insights&nbsp;and analytics&nbsp;to improve&nbsp;threat detection and remediation&nbsp;capabilities.&nbsp;This will help&nbsp;SOC&nbsp;teams&nbsp;to&nbsp;move away from constant firefighting,&nbsp;so they can&nbsp;focus on more strategic&nbsp;tasks that improve their&nbsp;security&nbsp;posture,&nbsp;turning&nbsp;them&nbsp;into proactive protectors.&nbsp;<\/p>\n\n\n\n<p>IT leaders will look to extend this&nbsp;automation&nbsp;to&nbsp;taint analysis&nbsp;to support the move to&nbsp;DevSecOps, by&nbsp;helping&nbsp;development teams&nbsp;to automatically&nbsp;understand&nbsp;whether&nbsp;vulnerabilities could expose data or if they are harmless.&nbsp;Those insights will help developers prioritise&nbsp;their efforts more effectively, so they can&nbsp;consistently deliver high-quality code&nbsp;that\u2019s free&nbsp;from&nbsp;vulnerabilities, at greater speed.&nbsp;&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>As we head into a new year, business leaders are seeking to find new ways of preparing their organisations for the technology trends which are set to evolve. Here, Bernd Greifeneder, Founder and CTO of Dynatrace, discusses some of the key trends organisations are likely to face if they intend to continue on their Digital [&hellip;]<\/p>\n","protected":false},"author":21,"featured_media":61518,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[51,14589,9442,1489,29,13207,93,24],"tags":[16760,11129,775,8175,76,5307,16761],"class_list":["post-61517","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-case-study-newsletter","category-data","category-digital-transformation","category-insights","category-software","category-thought-leadership","category-top-stories","category-used","tag-16760","tag-aiops","tag-automation","tag-devsecops","tag-digital-transformation","tag-dynatrace","tag-opentelemetry"],"acf":[],"publishpress_future_workflow_manual_trigger":{"enabledWorkflows":[]},"_links":{"self":[{"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/posts\/61517","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/users\/21"}],"replies":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/comments?post=61517"}],"version-history":[{"count":8,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/posts\/61517\/revisions"}],"predecessor-version":[{"id":61912,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/posts\/61517\/revisions\/61912"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/media\/61518"}],"wp:attachment":[{"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/media?parent=61517"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/categories?post=61517"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/tags?post=61517"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}