News for hackers. Stuff that matters.
Re:The Marriage of DevOps and SecOps by speedstick on Tuesday August 30, 2016 @01:19PM (#12391969)
Ever heard of a jack of all trades? It's true that jacks are super valuable but a jack is not an ace. Following this model feels like your spreading your brain power in to too many disciplines.

There's also obvious moral hazard with this model. It's kinda like the fox guarding the hen house. Having the same department be code writer, operations and auditor seems like an awful Idea. If one has a tight dead line, they're going to cut corners. We've all seen it.

This model can only exist in a start-up because of man power constraints. Your first few hires are going to be amazing and may actually be capable of such a role. However, as time goes on, this person has built a castle that can't be touched. You're also going to find that as a company grows, the spread of aptitude and skill grows wider, making this model seem absolutely absurd. The simple chaotic environment that your """"secdevops"""" started in will not be the same two years from now. Newer employees are going to lack contextual knowledge due to the increased complexity and by the simple fact that they didn't build it.

In practice, most people are partly responsible for keeping the organization secure. This isn't news...

in other news, Yay! a new buzz word.

There are no comments on this comment yet.