Reblogging my greatest hits so you don’t have to.

Cyber Security is not DevOps

Templating engines are not magic.

Cyber Security is not DevOps. I agree it COULD be a facet of an organization’s posture but it doesn’t have to be.

Treating Cyber Security as optional within a DevOps workflow is a risky approach. The same goes with mandating a DevOps workflow, as it is literally an injected marketing tactic. We are supposed to be unbiased in our tool approach and should foster creativity both now and for posterity.

It does not matter if an organization hires engineers with the devsecops titles. In the end, the DevOps workflow is not enough to secure an organization no matter what secure label they slap on it.

While cybersec might not be directly tied to the performance metrics typically associated with DevOps, neglecting cybersecurity specifically can lead to significant risks, including data breaches, legal consequences, and damage to an organization’s reputation.

Devops is known for its immature approach and though it can be used as a tool it does not have to be the only model adopted for appropriate security posture.

For one, cyber security workflows, especially those that have operated in a NOC stance, have always had automation.

Partially manual and intentional workflows in this regard are more healthy, in my opinion.

Templating engines are not magic. It's just mad-libs for configuration files.

Stop posting devops memes for cyber security! STOP.

An example of a stupid meme. We secure what is reasonable, and nothing is ever 100 percent secure so we strategically plan and prepare, not make a paycheck which is all that DevOps is doing.

Original Source here.

What are you thoughts? Got any to add? Feel free to debate.

Citations

Like this story? Check out a list of all articles. Don’t forget to clap, subscribe, or become a member! If you’re feeling generous, leave me a tip! If you’re curious about sources, on a separate page because long citations tank my stats! Be sure to also check out my other publications at history.internetarchaeology.io.

The opinions and thoughts expressed on this platform reflect only the author’s views alone. Images/passages within this publication may contain certain elements of artificial intelligence but unless specified, have been edited for this article. This image originates from OpenAI. (2024). ChatGPT.