Impact of audits and assessments
In this section, we will discuss the importance of audits and assessments. In the recent past, we have seen several cases of data breaches, security breaches, and systems getting adversely affected by vulnerabilities and even an unauthorized person or process deploying releases in production. These affect not only the reputation of the company but also cause substantial monetary loss. The business value of auditing and assessing the CI/CD design patterns is immense. In modern times, with rapid technology adoption, CI/CD enables organizations to scale software delivery with speed and it is important to ensure the following features are embedded in the CI/CD workflows:
- Traceability and control of the CI/CD workflow
- Keeping pace with changing policies
- Configuring guardrails
- Injecting security
- Managing access control
Let’s look at some cases, including the lessons learned, which will make it clearer what impact audits...