New research shows that software developers are not receiving the training they need to be successful as DevOps becomes the prevalent approach to building and operating digital products and services. In today's application-centric economy that gap could have real impact on the productivity of businesses in every industry, as well as on the security and quality of the software that underpins the digital economy.
The 2017 DevSecOps Global Skills Survey, sponsored by Veracode, and DevOps.com, found that while 65 percent of DevOps professionals believe it is very important to have knowledge of DevOps when entering IT, they're not receiving the necessary training through formal education to be successful in today's DevSecOps world (70 percent). DevSecOps refers to the practice of integrating security into the development and testing of software for a "shift left" mentality for faster, better quality outcomes.
The on-demand nature of today's digital economy has driven the need to focus on innovation and improve the overall workflow of the modern enterprise. Implementing DevSecOps processes, in software development and deployment as a means of fuelling this effort, has highlighted the fact that today's formal education for IT and development professionals has not evolved in the same way, or as quickly, as development has shifted. Those surveyed said that their IT workforce is only somewhat prepared (55 percent) or not prepared (nearly 30 percent) with the skills necessary to securely deliver software at the speed of DevOps. In fact, nearly 40 percent of hiring managers surveyed reported that the hardest employees to find are the all-purpose DevOps gurus with sufficient knowledge about security testing. This poses a significant challenge, as more than 50 percent of organisations said that either the entire organisation or some of their teams are currently utilising DevOps practices.
DevSecOps Adoption Requires Organisations to Minimise the Skills Gap
Although nearly 80 percent of respondents have a bachelor or master's degree--with 50 percent reporting that they studied and earned degrees in computer science--there is still a lack of cybersecurity knowledge prior to entering the workforce. The survey found that 70 percent of respondents said the security education they received is not adequate for what their current positions require, and that they're learning their most relevant professional skills on the job (65 percent).
"With major industry...