Santa Cruz, CALIF. (April 30, 2020) - Deploying an application without proper security features was cited as the “worst thing they could do” by 27% of developers and IT managers surveyed for the newly released DevOps 2020 report by Evans Data. However, respondents are not adhering to internal security protocols during the development process. Of developers surveyed, 38% admitted to using code management tools not sanctioned or licensed by their IT teams.
“Ensuring uniform policies across different organizational units, and different levels of access, is particularly challenging,” said Evans Data CEO, Janel Garvin. “It is a crucial consideration when architecting a solution for security.”
Rapid development cycles are one reason for this rogue tool use. Whether deploying a full release or simply adding code to an existing project, organizations deploy something new at least once per month; 81% of respondents state that their organization releases and deploys software at least once a month on average, and 39% state that they have a new release at least once per day.
The usage of non-sanctioned tools represents a major gap in security oversight within DevOps teams. Mitigating security risk is only possible when companies institute uniform policies for tool use. DevOps professionals identify governing tool usage for the entire enterprise as a major pain point. Other challenges and pain points discussed in the DevOps 2020 survey report include:
- Biggest Challenge in Creating New Apps
- Software Audits as Pain Points
- Biggest Challenges in Using DevOps
- IT Assets - Self Service vs. IT Approval
- Worst Omissions in App Deployment
Just released, the DevOps 2020 survey report gives a comprehensive view of the attitudes, adoption patterns, and intentions of developers and IT managers within the enterprise as they relate to DevOps. Analysis and findings are based on 430 in-depth interviews conducted with an even number of developers and IT managers who have DevOps initiatives within their organizations.
The full table of contents, report methodology, and sample report pages are available online at evansdata.com/DevOps2020
Evans Data Corporation provides regularly updated IT industry market intelligence based on in-depth surveys of the global developer population. Evans' syndicated research includes surveys focused on developers in a wide variety of subjects.
Copyright 2020 Evans Data Corporation. All other company names, products and services mentioned in this document are the trademarks and property of their respective owners.