Published: 14 September 2023
在数字时代，安全对于软件生命周期管理至关重要。中国的安全和风险管理领导者必须积极推动文化变革，开展安全培训项目，确立共同目标，为安全与DevOps的持续整合奠定基础。
开发、安全和运维各个团队的目标和优先任务往往并不一致，因此会出现摩擦、缺乏协作。
在中国，找到熟练的DevSecOps专业人员并不容易。因此，安全团队经常会遇到资源缺口，难以使安全专业人员参与到正在进行的软件开发项目中。
协作文化和责任共担的思维模式是数字化转型取得成功的先决条件，但许多DevOps工程师仍然认为安全只是少数安全专家的责任。
在首席信息官（CIO）和业务领导者的参与下制定安全目标，确保IT产品/项目交付中的安全措施与业务优先事项保持一致。
通过安全教练体系，加强安全、应用开发和运维团队之间的关系，以在IT产品/项目的整个生命周期中保障DevOps活动的安全性。
与DevOps负责人合作，明确职责并定期沟通，使安全成为DevOps的自然组成部分，完成从DevOps向DevSecOps的转变。
Clients can log in to view the entire document.
Analysts:
Gartner research, which includes in-depth proprietary studies, peer and industry best practices, trend analysis and quantitative modeling, enables us to offer innovative approaches that can help you drive stronger, more sustainable business performance.
Our independence as a research firm enables our experts to provide unbiased advice you can trust.
Not only is Gartner research unbiased, it also contains key take-aways and recommendations for impactful next steps.
Our research practices and procedures distill large volumes of data into clear, precise recommendations.
We provide actionable, objective insight to help organizations make smarter, faster decisions to stay ahead of disruption and accelerate growth.
We offer one-on-one guidance tailored to your mission-critical priorities.
We work with you to select the best-fit providers and tools, so you avoid the costly repercussions of a poor decision.
Connect directly with peers to discuss common issues and initiatives and accelerate, validate and solidify your strategy.
Gartner clients can log in to access the full library.
Join your peers for the unveiling of the latest insights at Gartner conferences.
©2022 Gartner, Inc. and/or its affiliates. All rights reserved. Gartner is a registered trademark of Gartner, Inc. and its affiliates. This publication may not be reproduced or distributed in any form without Gartner’s prior written permission. It consists of the opinions of Gartner’s research organization, which should not be construed as statements of fact. While the information contained in this publication has been obtained from sources believed to be reliable, Gartner disclaims all warranties as to the accuracy, completeness or adequacy of such information. Although Gartner research may address legal and financial issues, Gartner does not provide legal or investment advice and its research should not be construed or used as such. Your access and use of this publication are governed by Gartner’s Usage Policy. Gartner prides itself on its reputation for independence and objectivity. Its research is produced independently by its research organization without input or influence from any third party. For further information, see Guiding Principles on Independence and Objectivity.
