When Devops Meets Security
2020.07.10
Unit A, 7/F, King Palace Plaza, 55 King Yip Street, Kwun Tong, Kowloon, Hong Kong
+852 3618 9970 [email protected]
Fun Coupon
2020.10.23
DevOps has been a new trend for all industries, no matter what types of business, DevOps approach are irresistible. It is understood companies may have its own software system or any other constraints such as technology level, operation cost and resources allocation which causes hesitation for companies in adapting DevOps. Taking security, governance and supervised regulations of financial institutions into account, it is undeniably companies’ adaptation in DevOps lacks behind with other industries. Financial institutions contain numerous customers privacy, technical input such as FinTech, due to the risk and the consequences in failure or immature development of DevOps or current stable environment in company’s technology and security, company’s decision maker may lack of incentives in accepting the new developed DevOps. Why should I change if the current software runs smoothly?
Financial industries are having some supervisions which companies cannot make changes easily and facing numerous challenges. Strong restrictions on securing network which prevents data leakage and hackers, delicate audit trials, which does not accept defects and errors, a full lifecycle governance which every steps of the development process have to be monitored. Compliance and security are really important for a financial institution, while DevOps may be categorized as a risk since it may be insecure in security and some companies have immature adaptation of DevOps may cause threats towards regulatory and governance of the company.
DevOps users has rapid growth recent years, Barclays, Lunar Way, HSBC, Bank of America etc has started to adapt it. While different leading financial institutions have relied on DevOps approach, it shows the popularity and benefits of DevOps are highly recognized. But security and compliance are still barriers for financial institutions to bring forth new ideas towards DevOps.
Financial institutions should prioritize security. Focus in security and merge with available tools in order to keep delivering and deploying. As time passes, financial institutions can even acquire automation and have a high return in DevOps and security. Automated security may enhance the required time in finding out and analyzing cyberattacks and hackers’ action, it ensures the agility and speed in articulating cyber security issues and reduce the time spent in manual and delay in countermeasures towards cyberattacks.
In conclusion, financial institutions require sophisticated and stringent standard in developing software due to company’s expectation and regulatory requirement. Developing DevOps yet to enhance efficiency and more secure in the long run and become outstanding. Financial institutions prioritized in security and compliance may obtain a great success in having a completeness of vision in adapting DevOps.
