IDC DevOps - Nordic

The past two years has seen the acceleration to digital driving a big shift in attitudes towards delivering digital products and services. In Feb 2022, IDC’s Future Enterprise Resiliency and Spending Survey, found that for 85% of EMEA organizations the pandemic elevated the need for digital innovation. However, as the digital demands of the business continue to escalate, software delivery teams are under extraordinary pressure to deliver more apps faster, putting dev productivity and delivery velocity in the spotlight. 

This pressure to deliver software-based digital innovation fuels the appetite to overcome friction points in the enterprise-scale adoption of DevOps. Focus shifts to change and evolve the way that teams collaborate through automation. 

At the core of software innovation sits a highly iterative, small-yet-fast release cycle; speed, however, counts for little if teams are held back by operational challenges. As many organizations have come to learn, running modern-day app environments is hard, particularly in the context of deep technical complexity, growing security risks and the high shortage of skills capable to operate such landscapes at scale.  This talk will discuss why “Connected DevOps” is the requirement for fast and secure delivery of digital products and services and therein a key pillar to driving digital-first strategic success.

During this presentation Simon Norrington will deep dive into the following questions:

• Is testing slowing your ability to release new software?
• What’s the value of testing to your DevOps efforts?
• How can you turn this potential bottle neck into a competitive differentiator?

It’s all too easy to get carried away with catchy new names for the same thing. Adding “sec” into DevOps seems like just such an occurrence. This talk makes the case that DevSecOps is actually something new and is a useful school of thinking for securing enterprise applications. 

It covers the three parts of DevSecOps, why they’re helpful, and why you should start putting DevSecOps in place for your applications.

Today, one way or another, organizations are leveraging cloud to gain speed and agility to achieve their business goals. A DevOps and Cloud-native mindset is nowadays intrinsically part of modern software development. The vast majority of organizations are already there or giving steps towards it. 

However, after adopting DevOps and becoming cloud-native, it’s hard to evaluate the organization maturity state and understand if it continues to evolute towards the right direction. 

In this talk, I share some real-world experiences, war stories and best practices for software engineers, engineering managers and technical leaders that want to drive their organizations towards engineering excellence - regardless on their organizational type (startup vs enterprise) and cloud strategy (single vs multi-cloud).

Working as a consultant for 15 years and now as a platform engineer at Lunar, I’ve seen many good and bad ways to transform a company to be more Agile. In this talk I will be sharing my thoughts on why many has failed and what a possible solution could look like. After the talk you will have learned what Promise Theory is and how it can be used as a fundamental tool to describe and design both teams and software, and how it not only relates, but also can be used to describe Domain Driven Design and Team Topology.

Modern WAFs are powerful but they can be complex to manage and operate. From deciding on deployment architecture and requirement mapping to DEVOPs (CI/CD) integration and finalizing the myriad of other considerations before moving to the tuning and operationalization phase, all this creates complexity and confusion.

As a result, modern WAFs can be costly to implement in both commercial and staffing terms.

Join Jay Coley, Lead Security Strategy at Fastly, as he demonstrates how you can reduce these issues to ensure your WAF deployments are as flexible and as simple as possible, all the while maintaining rule accuracy and WAF usability.

Aberdeen Group found that, ”a 1-second delay in page load time, known as application latency, results in 7% loss in conversions and a 16% decrease in customer satisfaction.  Hear about the benefits AIOps and learn from a real-case Consumer Products company has increased their NPS through AIOps.  

Walk away with learning and next steps on how to apply in your enterprise.

Our technology, work processes and our activities have one thing in common: they all depend on software. It is important that we can depend on safe and secure software. To assure this, we need to manage the risks that relate to it. Buying a tool is not enough to have functioning AppSec program integrated in your DevOps. So what can you do?

In this presentation we will take a look at what it means to build a holistic AppSec program. Our expert explores internal and external threats and risks and how to manage them. So what should be your takeaways? You should have the information about what it means to form a strong foundation for your AppSec program. Also, you should have an understanding as to why it requires more than just buying an AppSec tool.

While DevOps teams used to function in relative autonomy from the rest of the IT organisation, changing business and technological requirements in the post-pandemic era are making closer cooperation, and even integration, an imperative. A fully embedded DevOps capability will add significant elements of classical application performance monitoring and security management to its portfolio of responsibilities, while its concerns with CICD and proactive observation and analysis of the production environment will come to be shared by all of corporate IT.
In this presentation, the speaker will discuss:

• How and why DevOps is being more closely integrated with the rest of Corporate IT
• What features and functions will a full-embedded DevSecOps platform require
• How can an innovative DevOps culture be maintained within a Corporate IT framework

Postgres should run inside your Kubernetes cluster. Yes, inside, not outside Kubernetes. After all, a database should be seen as an application, a special type of application - for which it is legitimate to require an additional level of care and attention.