DevOps op het witte paard

De redding van Risk & Compliance

5 december 2019

Leonard Trimp

2

PGGM in vogelvlucht

* stand per 30 juni1018

*

750.000

215

1428

750.000

11X

4,2 MILJOEN

3

4

5

De route naar de klant

• Requirements document• Testcases• PSA• Implementatieplan• Etc.

• Vrijgaveadviezen• Akkoord x stakeholders• Architectuur certificaten

• FAT• GAT• PAT

6

Agile werken

7

8

9

Urgentie / noodzaak

Installation Period Turning Point Deployment Period

Factory systems

Subcontacting

Taylorism

Fordism

Project Management

Product Management

10

Age of oil & massproduction

Age of software & digital

DevOps

CI/CD

Agile

Lean

?

11

DevOps lifecycle

12Bron: bmc.com

DevOps

13Bron: synopsys.com

14

15

“Douane”

16

17

Risk Management Theatre

This is the name I coined for the commonly-

encountered control apparatus, imposed in a

top-down way, which makes life painful for

the innocent but can be circumvented by the

guilty.

- Jez Humble

Risico release verkleinen

18

19

20

21

22

“if the entire management model reeks of

mistrust and control mechanisms against

unwanted behavior, the result might actually

be more, not less, of what we try to prevent.

The more people are treated as criminals, the

more we risk that they will behave as such.”

- Bjarte Bogsnes

23

Specflow voor vastleggen testen

24

25

Architectuur

26

27

Architecture Decision Record

• Architectuur vastleggen• Readme.md

• ADR per beslissing

28

DevOps lifecycle

29Bron: bmc.com

Zoek de verschillen

30

31

32

33

34

35

36

37

38

De route naar de klant

• Requirements document• Testcases• PSA• Implementatieplan• Etc.

• Vrijgaveadviezen• Akkoord x stakeholders• Architectuur certificaten

• FAT• GAT• PATReautomatiseerde testen met specification by example

Readme & Architecture decision records

Configuration as code

Architecture descision records pull requests

Geautomatiseerde release documentatie

Akkoord op specflow testen

Geautomatiseerde testen

Review

39

40

41

42