aster.cloud aster.cloud
  • /
  • Platforms
    • Public Cloud
    • On-Premise
    • Hybrid Cloud
    • Data
  • Architecture
    • Design
    • Solutions
    • Enterprise
  • Engineering
    • Automation
    • Software Engineering
    • Project Management
    • DevOps
  • Programming
    • Learning
  • Tools
  • About
  • /
  • Platforms
    • Public Cloud
    • On-Premise
    • Hybrid Cloud
    • Data
  • Architecture
    • Design
    • Solutions
    • Enterprise
  • Engineering
    • Automation
    • Software Engineering
    • Project Management
    • DevOps
  • Programming
    • Learning
  • Tools
  • About
aster.cloud aster.cloud
  • /
  • Platforms
    • Public Cloud
    • On-Premise
    • Hybrid Cloud
    • Data
  • Architecture
    • Design
    • Solutions
    • Enterprise
  • Engineering
    • Automation
    • Software Engineering
    • Project Management
    • DevOps
  • Programming
    • Learning
  • Tools
  • About
  • Data
  • DevOps

ESG Research: Leveraging Observability Data For DevSecOps

  • aster.cloud
  • August 19, 2022
  • 3 minute read

There’s a call throughout the industry to shift security left in the software development lifecycle, expanding the DevOps methodologies that have been growing in adoption for more than a decade. DevSecOps is based on the idea that security is not an afterthought. Rather, it is a collaborative process that must be integrated from the start of the development process. To make this collaboration possible, every team—from security to development to operations—needs tools and a common language to communicate and succeed together.

At Mezmo, some of our most successful customers are adopting DevSecOps methodologies to ship and maintain more resilient and secure products. For them, using observability data as a single source of truth has been crucial to the success of these initiatives. So, we partnered with Enterprise Strategy Group (ESG) to understand how other enterprise companies feel about DevSecOps and how they can leverage their observability data to move the needle forward. Check out the highlights of their findings below and download the full report here.


Partner with aster.cloud
for your next big idea.
Let us know here.



From our partners:

CITI.IO :: Business. Institutions. Society. Global Political Economy.
CYBERPOGO.COM :: For the Arts, Sciences, and Technology.
DADAHACKS.COM :: Parenting For The Rest Of Us.
ZEDISTA.COM :: Entertainment. Sports. Culture. Escape.
TAKUMAKU.COM :: For The Hearth And Home.
ASTER.CLOUD :: From The Cloud And Beyond.
LIWAIWAI.COM :: Intelligence, Inside and Outside.
GLOBALCLOUDPLATFORMS.COM :: For The World's Computing Needs.
FIREGULAMAN.COM :: For The Fire In The Belly Of The Coder.
ASTERCASTER.COM :: Supra Astra. Beyond The Stars.
BARTDAY.COM :: Prosperity For Everyone.

DevSecOps adoption

As organizations adopt modern software development processes in the cloud, they are looking to incorporate security processes and controls into their software development lifecycle (SDLC).

Though only 22% of organizations said they have developed a DevSecOps strategy, 62% of organizations have a plan or are evaluating use cases for it, showing significant future growth. Across the board, 82% of respondents say accelerating the mean time to resolve security alerts and incidents is a top priority for their security team. Of those who are already leveraging DevSecOps, an overwhelming 95% report a positive impact on accelerating incident detection and 96% on response efforts.

Read More  Google I/O 2019 | Develop Games with Firebase

DevSecOps challenges today

Developer efficiency is all about shortening feedback loops so that developers can get the information they need to take action. It’s essential that they get accurate, timely information at every stage of the SDLC so that they can write high quality code and address issues once that code is in production.

As organizations increase the speed and volume of releases to serve more customers, they are collecting huge volumes of data. Almost one-third of organizations surveyed capture hundreds of terabytes of application data per month. But, it’s costly to collect this much data just for the sake of collecting it. In fact, 69% of respondents admit that they don’t capture certain data sources because of the high cost of storage and retention. This is problematic if there is an incident and the organization has incomplete data for a thorough analysis and timely response, not to mention potential compliance issues.

For those who have adopted DevSecOps, data capture and analysis are at the top of the list of challenges related to implementing it.

Observability and DevSecOps

“DevSecOps has been a challenge because traditional security methods are too disruptive to processes; organizations need solutions that work within developer workflows and tools along with their cloud-native tech stack,” said Melinda Marks, Senior Analyst at ESG. “Leveraging observability data can help drive efficiency by utilizing data to provide insight for better security processes, policies, and faster incident response.”

The study shows that 91% of organizations are using more than one tool to get the most value out of their data, which makes it difficult for multiple teams to have access to the data they need to do their jobs. Not having a “single source of truth” is reported as the greatest challenge holding teams back.

Read More  5 Examples Of Metrics Or Log Data That Drives Observability

Eighty-seven percent of respondents said that they are using open source tools as part or all of their observability stack today because they are more customizable. But, 84% believe it will become challenging to manage, adopt, and scale with these solutions. Nearly all survey respondents (98%), with titles across teams, from application developers to IT and security professionals, said they will likely investigate a managed observability solution over the next 12 months. This reflects what we’re hearing in the market and from leaders like Gartner, who recently showed observability on the decline from the “height of inflated expectations” in their Hype Cycle for Monitoring, Observability and Cloud Operations, 2022. It’s clear that the observability solutions that enterprises have used for the last decade aren’t providing what they need as they adopt modern ways of working, like DevSecOps.

For more insight about DevSecOps and the role observability plays in successful adoption, download the report or reach out to an expert at Mezmo to find out how to modernize your observability practice at [email protected].


For enquiries, product placements, sponsorships, and collaborations, connect with us at [email protected]. We'd love to hear from you!

Our humans need coffee too! Your support is highly appreciated, thank you!

aster.cloud

Related Topics
  • DevSecOps
  • ESG
  • Mezmo
  • Observability
You May Also Like
Getting things done makes her feel amazing
View Post
  • Computing
  • Data
  • Featured
  • Learning
  • Tech
  • Technology

Nurturing Minds in the Digital Revolution

  • April 25, 2025
View Post
  • Data
  • Engineering

Hiding in Plain Site: Attackers Sneaking Malware into Images on Websites

  • January 16, 2025
IBM and Ferrari Premium Partner
View Post
  • Data
  • Engineering

IBM Selected as Official Fan Engagement and Data Analytics Partner for Scuderia Ferrari HP

  • November 7, 2024
dotlah-smartnation-singapore-lawrence-wong
View Post
  • Data
  • Enterprise
  • Technology

Growth, community and trust the ‘building blocks’ as Singapore refreshes Smart Nation strategies: PM Wong

  • October 8, 2024
nobel-prize-popular-physics-prize-2024-figure1
View Post
  • Data
  • Featured
  • Technology

They Used Physics To Find Patterns In Information

  • October 8, 2024
goswifties_number-crunching_202405_wm
View Post
  • Data
  • Featured

Of Nuggets And Tenders. To Know Or Not To Know, Is Not The Question. How To Become, Is.

  • May 25, 2024
View Post
  • Data

Generative AI Could Offer A Faster Way To Test Theories Of How The Universe Works

  • March 17, 2024
Chess
View Post
  • Computing
  • Data
  • Platforms

Chess.com Boosts Performance, Cuts Response Times By 71% With Cloud SQL Enterprise Plus

  • March 12, 2024

Stay Connected!
LATEST
  • 1
    Just make it scale: An Aurora DSQL story
    • May 29, 2025
  • 2
    Reliance on US tech providers is making IT leaders skittish
    • May 28, 2025
  • Examine the 4 types of edge computing, with examples
    • May 28, 2025
  • AI and private cloud: 2 lessons from Dell Tech World 2025
    • May 28, 2025
  • 5
    TD Synnex named as UK distributor for Cohesity
    • May 28, 2025
  • Weigh these 6 enterprise advantages of storage as a service
    • May 28, 2025
  • 7
    Broadcom’s ‘harsh’ VMware contracts are costing customers up to 1,500% more
    • May 28, 2025
  • 8
    Pulsant targets partner diversity with new IaaS solution
    • May 23, 2025
  • 9
    Growing AI workloads are causing hybrid cloud headaches
    • May 23, 2025
  • Gemma 3n 10
    Announcing Gemma 3n preview: powerful, efficient, mobile-first AI
    • May 22, 2025
about
Hello World!

We are aster.cloud. We’re created by programmers for programmers.

Our site aims to provide guides, programming tips, reviews, and interesting materials for tech people and those who want to learn in general.

We would like to hear from you.

If you have any feedback, enquiries, or sponsorship request, kindly reach out to us at:

[email protected]
Most Popular
  • Understand how Windows Server 2025 PAYG licensing works
    • May 20, 2025
  • By the numbers: How upskilling fills the IT skills gap
    • May 21, 2025
  • 3
    Cloud adoption isn’t all it’s cut out to be as enterprises report growing dissatisfaction
    • May 15, 2025
  • 4
    Hybrid cloud is complicated – Red Hat’s new AI assistant wants to solve that
    • May 20, 2025
  • 5
    Google is getting serious on cloud sovereignty
    • May 22, 2025
  • /
  • Technology
  • Tools
  • About
  • Contact Us

Input your search keywords and press Enter.