Governance and approvals
As the DevOps team goes through the process mapping phase, one of the most important requirements that the company and the security team have is support for advanced governance and auditing throughout the delivery process. Because of the different data protection and privacy laws across the world, as well as financial auditing requirements, there are restrictions associated with user access, deployment approvals, interaction auditing, and execution auditing.
Every action and interaction of code from the moment that the code is committed to a Git repository until the code is in production must be tracked and audit-ready. Developers must create a ticket associated with the purpose for their work and documentation on what changed, and then submit the code and the ticket for peer approval before the code can be moved on to the integration process. Throughout the integration process, every test that is run and its output must be documented, as well as the outcome...