Urgency Grows for Observability and Security Convergence
February 14, 2023
Share this

Organizations find increasing difficulty in maintaining software reliability and security as the demand for continuous release cycles and the rising complexity of cloud-native environments create more risk for undetected defects and vulnerabilities to escape into production, according to the 2023 Global CIO Report, Observability and Security Convergence: Enabling Faster, More Secure Innovation in the Cloud, from Dynatrace.

CIOs and senior DevOps managers are looking to DevSecOps processes, the convergence of observability and security, and the increased use of AI and automation to balance accelerated innovation with reliability and security.

The research reveals the following:

■ 90% of organizations say digital transformation has accelerated in the past 12 months.

■ 78% of organizations deploy software updates into production every 12 hours or less, and 54% say they do so at least once every two hours.

■ DevOps teams spend nearly a third (31%) of their time on manual tasks involving detecting code quality issues and vulnerabilities, reducing the time spent on innovation.

■ 55% of organizations make tradeoffs between quality, security, and user experience to meet the need for rapid transformation.

■ 88% of CIOs say the convergence of observability and security practices will be critical to building a DevSecOps culture, and 90% say increasing the use of AIOps will be key to scaling up these practices.

"It's difficult for teams to accelerate the pace of innovation while also maintaining the highest quality and security standards," said Bernd Greifeneder, Founder and CTO at Dynatrace. "More frequent software deployments, combined with complex cloud-native architectures, make it easier for errors and vulnerabilities to escape into production where they impact customer experience and create risk. There simply aren't enough hours in the day for teams to test code as thoroughly as when they had only a single monthly deployment, but there's no margin for error in today's ultra-competitive, always-on economy. Something has to change."


Additional findings from the survey include:

■ Organizations plan to increase their spending on automation across development, security, and operations by 35% by 2024, as they invest more in continuously testing software quality (54%) and security (49%) in production, automatic vulnerability detection and blocking (41%), and automating release validation (35%).

■ 70% of CIOs say they need to improve their trust in the accuracy of AI's decisions before they can automate more of the CI/CD pipeline.

■ 94% of CIOs say extending a DevSecOps culture to more teams is key to accelerating digital transformation and driving faster, more secure software releases.

"Organizations know that manual approaches aren't scalable," continued Greifeneder. "Teams can't afford to waste time and effort chasing false positives, searching for vulnerabilities whenever a new threat alert appears, or conducting forensics to understand whether data has been compromised. They need to work together to drive faster, more secure innovation. Automation and modern delivery practices such as DevSecOps are key to this, but teams need to trust that their AI is reaching the right conclusions about the impact of a particular vulnerability. To accomplish this, organizations require a unified platform that can converge observability and security data to eliminate the silos between teams. By bringing their data together and retaining its context, DevOps and security teams can unlock the insights they need through causal AI. This enables them to harness intelligent automation to rapidly deliver high-performing and secure applications that delight their users."

Methdology: The report is based on a global survey of 1,300 CIOs and senior IT practitioners involved in DevOps management in large organizations with more than 1,000 employees, conducted by Coleman Parkes and commissioned by Dynatrace. The sample included 200 respondents in the US, 100 in Latin America, 600 in Europe, 150 in the Middle East, and 250 in Asia Pacific.

Share this

The Latest

March 23, 2023

APMdigest and leading IT research firm Enterprise Management Associates (EMA) are partnering to bring you the EMA-APMdigest Podcast, a new podcast focused on the latest technologies impacting IT Operations. In Episode 2 - Part 1 Pete Goldin, Editor and Publisher of APMdigest, discusses Network Observability with Shamus McGillicuddy, Vice President of Research, Network Infrastructure and Operations, at EMA ...

March 22, 2023

CIOs have stepped into the role of digital leader and strategic advisor, according to the 2023 Global CIO Survey from Logicalis ...

March 21, 2023

Synthetic monitoring is crucial to deploy code with confidence as catching bugs with E2E tests on staging is becoming increasingly difficult. It isn't trivial to provide realistic staging systems, especially because today's apps are intertwined with many third-party APIs ...

March 20, 2023

Recent EMA field research found that ServiceOps is either an active effort or a formal initiative in 78% of the organizations represented by a global panel of 400+ IT leaders. It is relatively early but gaining momentum across industries and organizations of all sizes globally ...

March 16, 2023

Managing availability and performance within SAP environments has long been a challenge for IT teams. But as IT environments grow more complex and dynamic, and the speed of innovation in almost every industry continues to accelerate, this situation is becoming a whole lot worse ...

March 15, 2023

Harnessing the power of network-derived intelligence and insights is critical in detecting today's increasingly sophisticated security threats across hybrid and multi-cloud infrastructure, according to a new research study from IDC ...

March 14, 2023

Recent research suggests that many organizations are paying for more software than they need. If organizations are looking to reduce IT spend, leaders should take a closer look at the tools being offered to employees, as not all software is essential ...

March 13, 2023

Organizations are challenged by tool sprawl and data source overload, according to the Grafana Labs Observability Survey 2023, with 52% of respondents reporting that their companies use 6 or more observability tools, including 11% that use 16 or more.

March 09, 2023

An array of tools purport to maintain availability — the trick is sorting through the noise to find the right one. Let us discuss why availability is so important and then unpack the ROI of deploying Artificial Intelligence for IT Operations (AIOps) during an economic downturn ...

March 08, 2023

Development teams so often find themselves rushing to get a release out on time. When it comes time for testing, the software works fine in the lab. But, when it's released, customers report a bunch of bugs. How does this happen? Why weren't the flaws found in QA? ...