DevOps Articles

Who’s Responsible for Security? Apparently, It Depends

More than 10 years after organizations began implementing DevOps, responsibility for security still resembles the proverbial chicken and egg dilemma. GitLab’s 2020 Global DevSecOps Survey asked developers, security team members, operations pros and testers about sole responsibility for security in their organizations. About 28% of developers, 33% of security teams, 21% of ops pros and 23% of testers said responsibility for security rested only on their shoulders.

There’s a long history of developers and security pros not seeing eye to eye.

Clearly, there is work to be done to get developers and security on the same page, but we are seeing a few glimmers of hope.