DevSecOps in the OPERATE Phase

As we move towards the operator and monitor phases, the focus changes from ensuring the application is built robustly to checking to make sure that the application is not under attack and when it is that we know about it as soon as possible.

⭕ Compliance as code

▪ Check against an approved baseline, eliminate any deviation from baseline, and eliminates any deviation from this baseline in real-time is important for the operate phase.

⭕ Verification and monitoring

▪ Continuous checking that everything is operating “normally”