DevOps vs CI/CD vs DevSecOps SDLC Models
Author: Abhay Reddy
There will be more than 55.7 billion connected devices by 2025, and 75% will feature IoT connectivity which is estimated to produce 80 zettabytes of data. [Source]
IT spending in 2022 touched $4.4 Trillion [Source] and is only expected to grow further
DevOps (2009) is an Agile methodology encompassing Development (Dev) and Operations (Ops). It enables end-to-end lifecycle delivery of features, fixes, and updates at frequent intervals. Agile adoption inherently left the Operations department behind with deployments piling up faster than they could be released. This trend ultimately pushed the rise of DevOps
Image: SDLC DevOps
Key factors driving DevOps adoption:
- Accelerate software delivery, and reduce time to market
- Continuously incorporate customer feedback
- Reduce project risk and cost
- Increase productivity, collaboration, and business alignment
- Enhance software quality and security
- Frequent updates to complex infrastructure without disruptions (No-downtime)
- Increase automation.
- Personnel/Developer/Skill shortage.
- Rapid evolution of technologies: hybrid clouds, containers, Low code development platforms, AI, Big Data
Continuous Integration and Continuous Delivery (CI/CD) falls under DevOps. It automates much of the traditional human intervention needed to get new code tested and pushed out for delivery and deployment. One of the key goals is to place code right into a production environment without stopping any functions from running.
Image: SDLC CI/CD
While DevOps practices have resulted in 60% of developers releasing code twice as quickly, the increased speed has created a tradeoff with nearly half the organizations consciously deploying vulnerable code because of time pressure. [Source]
- Data security risks against Industrial control systems and Operational Technology grew three times in 2020. [Source]
- The rise in cybercrime from various sources was anticipated to cost the world more than USD 6 trillion in 2021 [Source]
DevSecOps adds security to a familiar DevOps practice. It allows organizations to innovate, build and release solutions while integrating security testing and validations into the product lifecycle (vs at the end as an add-on). DevSecOps market size is projected to reach USD 41.66 billion by 2030, growing at a CAGR of 30.76% from 2022 to 2030. [Source].
Image: SDLC DevSecOps
