Skip to content

September 4, 2018

Featured Resource: Dear Auditor

By IT Revolution
Dear Auditor DevOps Resource

Leading up to DevOps Enterprise Summit 2018 Las Vegas, we’ll be releasing our newest DevOps resources to our community on a weekly basis.

Each of these resources come to you straight from the DevOps Enterprise Forum, where more than 50 technology leaders and thinkers gather for three days to create written guidance on the best-known methods for overcoming the top obstacles in the DevOps Enterprise community.


Dear Auditor DevOps Resource

The rapidly changing practices from Agile and DevOps to cloud and containers have been better in the long run for everyone, except for one group — The Auditors. In our commitment to providing value at a fast pace, we forgot to bring them along for the ride. But not for much longer.

In this week’s resource (download here), we’ve compiled a list of audit concerns, documented in a Risk Control Matrix, in the hopes that this matrix can provide a way for us to collaborate on risk mitigation practices from now on.

The Risk Control Matrix highlights risks such as:

  • Unauthorized changes production
  • Business continuity
  • Material misstatement of financial data
  • Data breach from unauthorized access
  • Material misstatement of financial data
  • Unwanted customer impact (blast radius) from changes

The authors on each of these resources will be prominent figures in the industry, and on this particular one, we have seven industry leaders working together. They include:

  • Ben Grinnell, Managing Director and Global Head of Technology & Digital, North Highland
  • James Wickett, Head of Research, Signal Sciences Corp
  • Jennifer Brady, Director of Enterprise Data Management, Capital One
  • Robert Stroud, Chief Product Officer, XebiaLabs
  • Sam Guckenheimer, Product Owner of Microsoft Visual Studio
  • Scott Nasello, Director, Delivery Engineering, Columbia Sportswear
  • Tapabrata Pal, Senior Director & Senior Engineering Fellow, Capital One

Here is an amazing presentation from an author on this week’s resource.

Jennifer Brady

Tapabrata “Topo” Pal


If you’re eager to continue learning about these topics and more, see how you can be a part of DevOps Enterprise Summit 2018 Las Vegas. We spend three days talking with the leaders of large, complex organizations implementing DevOps principles and practices, with the goal to give leaders (like you) the tools and practices they need to develop and deploy software faster and to win in the marketplace.

Dear Auditor DevOps Resource

- About The Authors
Avatar photo

IT Revolution

Trusted by technology leaders worldwide. Since publishing The Phoenix Project in 2013, and launching DevOps Enterprise Summit in 2014, we’ve been assembling guidance from industry experts and top practitioners.

Follow IT on Social Media

No comments found

Leave a Comment

Your email address will not be published.



Jump to Section

    More Like This

    Map Camp: Weird Mapping – How to Create a Revolution
    By David Anderson

    A version of this post was originally published at TheServerlessEdge.com. Dave Anderson, author of…

    Serverless Myths
    By David Anderson , Michael O’Reilly , Mark McCann

    The term “serverless myths” could also be “modern cloud myths.” The myths highlighted here…

    What is the Modern Cloud/Serverless?
    By David Anderson , Michael O’Reilly , Mark McCann

    What is the Modern Cloud? What is Serverless? This post, adapted from The Value…

    Using Wardley Mapping with the Value Flywheel
    By David Anderson , Michael O’Reilly , Mark McCann

    Now that we have our flywheel turning (see our posts What is the Value…