SlideShare una empresa de Scribd logo
1 de 59
Session ID:
@RealGeneKim, genek@realgenekim.me
How Do We Better Sell DevOps?
Gene Kim
@RealGeneKim
Act I: IT Ops Fixing Fragile Artifacts
@RealGeneKim
@RealGeneKim
The Product Managers
@RealGeneKim
Act 2: The Developers
@RealGeneKim
@RealGeneKim
@RealGeneKim
IT Ops And Dev At War
11
@RealGeneKim
Nothing Left For Infosec
@RealGeneKim
@RealGeneKim
14
The Downward
Spiral…
Act 3:
There Must Be A Better
Way…
15
@RealGeneKimSource: John Allspaw
@RealGeneKim
Source: John Allspaw
How Do We Help Others
Achieve Their Own “Aha”
Moments?
30
@RealGeneKim
@RealGeneKim
Eric Passmore, former SVP Global
Engineering, AOL (2007)
32
The Downward Spiral
Operations Sees…
 Fragile applications are prone to
failure
 Long time required to figure out “which
bit got flipped”
 Detective control is a salesperson
 Too much time required to restore
service
 Too much firefighting and unplanned
work
 Planned project work cannot complete
 Frustrated customers leave
 Market share goes down
 Business misses Wall Street
commitments
 Business makes even larger promises
to Wall Street
Dev Sees…
 More urgent, date-driven projects
put into the queue
 Even more fragile code put into
production
 More releases have increasingly
“turbulent installs”
 Release cycles lengthen to
amortize “cost of deployments”
 Failing bigger deployments more
difficult to diagnose
 Most senior and constrained IT
ops resources have less time to
fix underlying process problems
 Ever increasing backlog of
infrastructure projects that could
fix root cause and reduce costs
 Ever increasing amount of
tension between IT Ops and
Development
These aren’t IT Operations problems…
These are business problems!
@RealGeneKim
Dr. Bill Lattin
34
@RealGeneKim
Stages Of Value Selling
 Problem
 Significance
 Solution
 Value
35
@RealGeneKim
Easy Lines To Get Started
 Problem
 “What’s the difference between a good day and a bad
day?”
 “What keeps you up at night?”
36
@RealGeneKim
Easy Lines To Get Started
 Significance
 “Does anyone really care if that bad thing happens?”
 “On a scale of 1-10, how big of a problem is this?”
 “So what?”
37
@RealGeneKim
Easy Lines To Get Started
 Solution
 “If you could wave a magic wand, what would you
do?”
 “If you were king/queen, what would it look like?”
38
@RealGeneKim
Easy Lines To Get Started
 Value
 “What’s in it for you?”
 “In six months, if all this comes true, what does life
look like for you?”
39
@RealGeneKim
Stages Of Value Selling
 Problem
 Significance
 Solution
 Value
40
When you do this, it should give you confidence that you’re not wasting
anyone’s time.
The Downward Spiral
Operations Sees…
 Fragile applications are prone to
failure
 Long time required to figure out “which
bit got flipped”
 Detective control is a salesperson
 Too much time required to restore
service
 Too much firefighting and unplanned
work
 Planned project work cannot complete
 Frustrated customers leave
 Market share goes down
 Business misses Wall Street
commitments
 Business makes even larger promises
to Wall Street
Dev Sees…
 More urgent, date-driven projects
put into the queue
 Even more fragile code put into
production
 More releases have increasingly
“turbulent installs”
 Release cycles lengthen to
amortize “cost of deployments”
 Failing bigger deployments more
difficult to diagnose
 Most senior and constrained IT
ops resources have less time to
fix underlying process problems
 Ever increasing backlog of
infrastructure projects that could
fix root cause and reduce costs
 Ever increasing amount of
tension between IT Ops and
Development
These aren’t IT Operations problems…
These are business problems!
More Patterns And
Members Of The Tribe We
Need To Recruit
42
@RealGeneKim
Gene Kim, CTO, Tripwire, Inc. (2006)
43
The Downward Spiral
Operations Sees…
 Fragile applications are prone to
failure
 Long time required to figure out “which
bit got flipped”
 Detective control is a salesperson
 Too much time required to restore
service
 Too much firefighting and unplanned
work
 Planned project work cannot complete
 Frustrated customers leave
 Market share goes down
 Business misses Wall Street
commitments
 Business makes even larger promises
to Wall Street
Dev Sees…
 More urgent, date-driven projects
put into the queue
 Even more fragile code put into
production
 More releases have increasingly
“turbulent installs”
 Release cycles lengthen to
amortize “cost of deployments”
 Failing bigger deployments more
difficult to diagnose
 Most senior and constrained IT
ops resources have less time to
fix underlying process problems
 Ever increasing backlog of
infrastructure projects that could
fix root cause and reduce costs
 Ever increasing amount of
tension between IT Ops and
Development
These aren’t IT Operations problems…
These are business problems!
@RealGeneKim
Anonymous Product Manager/UX (2011)
45
The Downward Spiral
Operations Sees…
 Fragile applications are prone to
failure
 Long time required to figure out “which
bit got flipped”
 Detective control is a salesperson
 Too much time required to restore
service
 Too much firefighting and unplanned
work
 Planned project work cannot complete
 Frustrated customers leave
 Market share goes down
 Business misses Wall Street
commitments
 Business makes even larger promises
to Wall Street
Dev Sees…
 More urgent, date-driven projects
put into the queue
 Even more fragile code put into
production
 More releases have increasingly
“turbulent installs”
 Release cycles lengthen to
amortize “cost of deployments”
 Failing bigger deployments more
difficult to diagnose
 Most senior and constrained IT
ops resources have less time to
fix underlying process problems
 Ever increasing backlog of
infrastructure projects that could
fix root cause and reduce costs
 Ever increasing amount of
tension between IT Ops and
Development
These aren’t IT Operations problems…
These are business problems!
@RealGeneKim
Anonymous Infosec (2012)
47
@RealGeneKim
Josh Corman (2012)
48
@RealGeneKim
Justin Collins, Neil Matatall and Alex
Smolen from Twitter
49
@RealGeneKim
Value To Infosec
 Integrate security testing into daily Dev work
 Reduce time from “find to fix”
 Reduce surface area of risk
 Non-functional requirements (Anonymous can
do 6 GB/sec DDoS: how can we survive it?)
 Enforce consistency
 Build in auditability
 Have reliance on IT Ops tools in daily use
 Traceability of production artifacts
50
The Downward Spiral
Operations Sees…
 Fragile applications are prone to
failure
 Long time required to figure out “which
bit got flipped”
 Detective control is a salesperson
 Too much time required to restore
service
 Too much firefighting and unplanned
work
 Planned project work cannot complete
 Frustrated customers leave
 Market share goes down
 Business misses Wall Street
commitments
 Business makes even larger promises
to Wall Street
Dev Sees…
 More urgent, date-driven projects
put into the queue
 Even more fragile code put into
production
 More releases have increasingly
“turbulent installs”
 Release cycles lengthen to
amortize “cost of deployments”
 Failing bigger deployments more
difficult to diagnose
 Most senior and constrained IT
ops resources have less time to
fix underlying process problems
 Ever increasing backlog of
infrastructure projects that could
fix root cause and reduce costs
 Ever increasing amount of
tension between IT Ops and
Development
These aren’t IT Operations problems…
These are business problems!
@RealGeneKim
52
Session ID:
@RealGeneKim, genek@realgenekim.me
Session ID:
@RealGeneKim, genek@realgenekim.me
Value And Objection
Handling
55
@RealGeneKim
Our Desired Future Reality
 Installs are predictable and require less time/effort than ever
 Engineering teams take decisive steps to correct bad installs (and they don’t
happen again)
 We are deploying code faster than ever, and can quickly detect and recover
 We have operational discipline to enforce a structured resolution process
 Less unexpected downtime
 Schedule and complete infrastructure improvement projects
 Bad installs rarely have a cascading effect
 Business unit releases are on schedule (vs delayed)
 Customers rarely leave
 We’re winning customers
 We exceed our 20% growth target
 Our business hitting earnings targets
 We can tackle even more projects, hire more stars, etc.
56
@RealGeneKim
High Performing DevOps Teams
 They’re more agile
 30x more frequent deployments
 8,000x faster cycle time than their peers
 They’re more reliable
 2x the change success rate
 12x faster MTTR
Source: Puppet Labs 2012 State Of DevOps: http://puppetlabs.com/2013-state-of-devops-infographic
58
How organizations achieve high performance
• 89% have infrastructure artifacts in version control
• 82% have automated process to create environments
Source: Puppet Las 2012 DevOps Survey Of Practice
59
Performance by DevOps maturity
Organizations that implemented DevOps practices over 12
months ago were 5x more likely to be high performing than
organizations that weren’t implementing DevOps at all.
Source: Puppet Las 2012 DevOps Survey Of Practice
@RealGeneKim
Who Is Doing DevOps?
 Google, Amazon, Netflix, Etsy, Twitter, Facebook
, Pinterest …
 BNY Mellon, Bank of America, World
Bank, Paychex, Intuit…
 The
Gap, Nordstrom, REI, Macy’s, GameStop, …
 Portland State University, Seton Hill
University, Kansas State University…
 Who else?
60
@RealGeneKim
Who Is Doing DevOps?
 Google, Amazon, Netflix, Etsy, Twitter, Facebook
, Pinterest …
 BNY Mellon, Bank of America, World
Bank, Paychex, Intuit…
 The
Gap, Nordstrom, REI, Macy’s, GameStop, …
 Portland State University, Seton Hill
University, Kansas State University…
 Who else?
61
@RealGeneKim
62
@RealGeneKim
Dorian Cougias
63
@RealGeneKim
@RealGeneKim
65
“This book will have a profound
effect on IT, just as The Goal did
for manufacturing.” --Jez
Humble, co-author Continuous
Delivery
“This is the IT swamp draining
manual for anyone who is neck
deep in alligators.” --Adrian
Cockroft, Cloud Architect at
Netflix
“This is The Goal for our
decade, and is for any IT
professional who wants their life
back.” --Charles Betz, IT
architect, author “Architecture
and Patterns for IT”
Why Do I Think This Is
Important?
113
@RealGeneKim
114
The Downward
Spiral…
@RealGeneKim
@RealGeneKim
116
@RealGeneKim
If I Could Wave A Magic Wand, Everyone Will…
 Be energized about how practitioners can
contribute in this organizational journey
 Leave with some concrete steps to get some
great outcomes
 Help create the coalition that starts putting
DevOps practices into place
117
@RealGeneKim
119
“Some books you give to
friends, for the joy of sharing a
great novel.
“Some books you recommend to
your colleagues and
employees, to create common
ground.
“Some books you share with your
boss, to plant the seeds of a big
idea.
“The Phoenix Project is all three.”
--Jeremiah Shirk, Integration &
Infrastructure Manager at
Kansas State University
@RealGeneKim
Our Mission: Positively Impact The Lives Of
One Million IT Workers By 2017
 Free 170 page
excerpt:http://itrevolution.com/the-
phoenix-project-excerpt/
 http://slideshare.net/realgenekim
 DevOps Defensive Audit Toolkit
 Enterprise DevOps Case Studies
 Early draft of upcoming “DevOps
Cookbook”
(Allspaw, DeBois, Edwards, Humble, Kim
, Orzen)
 Email me at genek@realgenekim.me
Session ID:
@RealGeneKim, genek@realgenekim.me
Session ID:
@RealGeneKim, genek@realgenekim.me

Más contenido relacionado

La actualidad más candente

La actualidad más candente (20)

Agile 101
Agile 101Agile 101
Agile 101
 
Practical Guide to Scrum
Practical Guide to ScrumPractical Guide to Scrum
Practical Guide to Scrum
 
Kanban vs Scrum: What's the difference, and which should you use?
Kanban vs Scrum: What's the difference, and which should you use?Kanban vs Scrum: What's the difference, and which should you use?
Kanban vs Scrum: What's the difference, and which should you use?
 
Agile Software Development
Agile Software DevelopmentAgile Software Development
Agile Software Development
 
Dealing with Shifting Priorities using Lean/Kanban Flow, WIP Limits and Capac...
Dealing with Shifting Priorities using Lean/Kanban Flow, WIP Limits and Capac...Dealing with Shifting Priorities using Lean/Kanban Flow, WIP Limits and Capac...
Dealing with Shifting Priorities using Lean/Kanban Flow, WIP Limits and Capac...
 
Scrum best practices
Scrum best practicesScrum best practices
Scrum best practices
 
Beyond the Scrum Master - Becoming an Agile Coach
Beyond the Scrum Master - Becoming an Agile CoachBeyond the Scrum Master - Becoming an Agile Coach
Beyond the Scrum Master - Becoming an Agile Coach
 
Maturity Mapping - Intro to Wardley Mapping, Social Practice Theory and Matur...
Maturity Mapping - Intro to Wardley Mapping, Social Practice Theory and Matur...Maturity Mapping - Intro to Wardley Mapping, Social Practice Theory and Matur...
Maturity Mapping - Intro to Wardley Mapping, Social Practice Theory and Matur...
 
The Art of the Retrospective: How to run an awesome retrospective meeting
The Art of the Retrospective: How to run an awesome retrospective meetingThe Art of the Retrospective: How to run an awesome retrospective meeting
The Art of the Retrospective: How to run an awesome retrospective meeting
 
The Values and Principles of Agile Software Development
The Values and Principles of Agile Software DevelopmentThe Values and Principles of Agile Software Development
The Values and Principles of Agile Software Development
 
Quality strategies in Agile Transformation
Quality strategies in Agile TransformationQuality strategies in Agile Transformation
Quality strategies in Agile Transformation
 
Nexus Framework
Nexus FrameworkNexus Framework
Nexus Framework
 
Specification-By-Example with Gherkin
Specification-By-Example with GherkinSpecification-By-Example with Gherkin
Specification-By-Example with Gherkin
 
Lean Software Development
Lean Software DevelopmentLean Software Development
Lean Software Development
 
Agile Metrics...That Matter
Agile Metrics...That MatterAgile Metrics...That Matter
Agile Metrics...That Matter
 
Agile Engineering Practices
Agile Engineering PracticesAgile Engineering Practices
Agile Engineering Practices
 
Agile-overview: Agile Manifesto, Agile principles and Agile Methodologies
Agile-overview: Agile Manifesto, Agile principles and Agile MethodologiesAgile-overview: Agile Manifesto, Agile principles and Agile Methodologies
Agile-overview: Agile Manifesto, Agile principles and Agile Methodologies
 
Agile presentation
Agile presentationAgile presentation
Agile presentation
 
Relative Estimation: Exercises & Illustrations
Relative Estimation: Exercises & IllustrationsRelative Estimation: Exercises & Illustrations
Relative Estimation: Exercises & Illustrations
 
Intro to Kanban - AgileDayChile2011 Keynote
Intro to Kanban - AgileDayChile2011 KeynoteIntro to Kanban - AgileDayChile2011 Keynote
Intro to Kanban - AgileDayChile2011 Keynote
 

Destacado

Jesse Robbins Keynote - Hacking Culture @ Cloud Expo Europe 2013
Jesse Robbins Keynote - Hacking Culture @ Cloud Expo Europe 2013Jesse Robbins Keynote - Hacking Culture @ Cloud Expo Europe 2013
Jesse Robbins Keynote - Hacking Culture @ Cloud Expo Europe 2013
Jesse Robbins
 
DOES SFO 2016 - Greg Maxey and Laurent Rochette - DSL at Scale
DOES SFO 2016 - Greg Maxey and Laurent Rochette - DSL at ScaleDOES SFO 2016 - Greg Maxey and Laurent Rochette - DSL at Scale
DOES SFO 2016 - Greg Maxey and Laurent Rochette - DSL at Scale
Gene Kim
 

Destacado (19)

Leading A DevOps Transformation: Lessons Learned
Leading A DevOps Transformation: Lessons LearnedLeading A DevOps Transformation: Lessons Learned
Leading A DevOps Transformation: Lessons Learned
 
2013 Velocity DevOps Metrics -- It's Not Just For WebOps Any More!
2013 Velocity DevOps Metrics -- It's Not Just For WebOps Any More!2013 Velocity DevOps Metrics -- It's Not Just For WebOps Any More!
2013 Velocity DevOps Metrics -- It's Not Just For WebOps Any More!
 
TechTalk: All You Want to Know About Docker and CA Testing Tools.
TechTalk: All You Want to Know About Docker and CA Testing Tools.TechTalk: All You Want to Know About Docker and CA Testing Tools.
TechTalk: All You Want to Know About Docker and CA Testing Tools.
 
Pics from Oracle OpenWorld 2012 - CA Service Virtualization
Pics from Oracle OpenWorld 2012 - CA Service VirtualizationPics from Oracle OpenWorld 2012 - CA Service Virtualization
Pics from Oracle OpenWorld 2012 - CA Service Virtualization
 
CA Service Virtualization vs mocks stubs
CA Service Virtualization vs mocks stubsCA Service Virtualization vs mocks stubs
CA Service Virtualization vs mocks stubs
 
CA John Michelsen - Oracle OpenWorld 2012 - "ServiceVirtualization Reality is...
CA John Michelsen - Oracle OpenWorld 2012 - "ServiceVirtualization Reality is...CA John Michelsen - Oracle OpenWorld 2012 - "ServiceVirtualization Reality is...
CA John Michelsen - Oracle OpenWorld 2012 - "ServiceVirtualization Reality is...
 
10+ Deploys Per Day: Dev and Ops Cooperation at Flickr
10+ Deploys Per Day: Dev and Ops Cooperation at Flickr10+ Deploys Per Day: Dev and Ops Cooperation at Flickr
10+ Deploys Per Day: Dev and Ops Cooperation at Flickr
 
Continuous Delivery, DevOps, Cloud - New Requirements for New Architectures
Continuous Delivery, DevOps, Cloud - New Requirements for New ArchitecturesContinuous Delivery, DevOps, Cloud - New Requirements for New Architectures
Continuous Delivery, DevOps, Cloud - New Requirements for New Architectures
 
Jesse Robbins Keynote - Hacking Culture @ Cloud Expo Europe 2013
Jesse Robbins Keynote - Hacking Culture @ Cloud Expo Europe 2013Jesse Robbins Keynote - Hacking Culture @ Cloud Expo Europe 2013
Jesse Robbins Keynote - Hacking Culture @ Cloud Expo Europe 2013
 
DOES SFO 2016 - Greg Maxey and Laurent Rochette - DSL at Scale
DOES SFO 2016 - Greg Maxey and Laurent Rochette - DSL at ScaleDOES SFO 2016 - Greg Maxey and Laurent Rochette - DSL at Scale
DOES SFO 2016 - Greg Maxey and Laurent Rochette - DSL at Scale
 
DOES SFO 2016 - Daniel Perez - Doubling Down on ChatOps in the Enterprise
DOES SFO 2016 - Daniel Perez - Doubling Down on ChatOps in the EnterpriseDOES SFO 2016 - Daniel Perez - Doubling Down on ChatOps in the Enterprise
DOES SFO 2016 - Daniel Perez - Doubling Down on ChatOps in the Enterprise
 
DOES SFO 2016 - Scott Willson - Top 10 Ways to Fail at DevOps
DOES SFO 2016 - Scott Willson - Top 10 Ways to Fail at DevOpsDOES SFO 2016 - Scott Willson - Top 10 Ways to Fail at DevOps
DOES SFO 2016 - Scott Willson - Top 10 Ways to Fail at DevOps
 
DOES SFO 2016 - Greg Padak - Default to Open
DOES SFO 2016 - Greg Padak - Default to OpenDOES SFO 2016 - Greg Padak - Default to Open
DOES SFO 2016 - Greg Padak - Default to Open
 
DOES SFO 2016 - Mark Imbriaco - Lessons From the Bleeding Edge
DOES SFO 2016 - Mark Imbriaco - Lessons From the Bleeding EdgeDOES SFO 2016 - Mark Imbriaco - Lessons From the Bleeding Edge
DOES SFO 2016 - Mark Imbriaco - Lessons From the Bleeding Edge
 
DOES SFO 2016 - Marc Priolo - Are we there yet?
DOES SFO 2016 - Marc Priolo - Are we there yet? DOES SFO 2016 - Marc Priolo - Are we there yet?
DOES SFO 2016 - Marc Priolo - Are we there yet?
 
Viral marketing. How it works.
Viral marketing. How it works.Viral marketing. How it works.
Viral marketing. How it works.
 
Lembar asistensi laporan pengukuran besaran listrik
Lembar asistensi laporan pengukuran besaran listrikLembar asistensi laporan pengukuran besaran listrik
Lembar asistensi laporan pengukuran besaran listrik
 
Portable Air Conditioner
Portable Air ConditionerPortable Air Conditioner
Portable Air Conditioner
 
ABA Business Location Austria
ABA Business Location AustriaABA Business Location Austria
ABA Business Location Austria
 

Similar a How Can We Better Sell DevOps?

SecureWorld Kim - Infosec at Ludicrous Speeds - Rugged DevOps 6a
SecureWorld   Kim - Infosec at Ludicrous Speeds - Rugged DevOps 6aSecureWorld   Kim - Infosec at Ludicrous Speeds - Rugged DevOps 6a
SecureWorld Kim - Infosec at Ludicrous Speeds - Rugged DevOps 6a
Gene Kim
 
ServiceNow ITIL at Ludicrous Speeds - Rugged DevOps
ServiceNow  ITIL at Ludicrous Speeds - Rugged DevOpsServiceNow  ITIL at Ludicrous Speeds - Rugged DevOps
ServiceNow ITIL at Ludicrous Speeds - Rugged DevOps
Gene Kim
 
Kim itSMF New England: ITIL at Ludicrous Speeds - Rugged DevOps 6a
Kim itSMF New England: ITIL at Ludicrous Speeds - Rugged DevOps 6aKim itSMF New England: ITIL at Ludicrous Speeds - Rugged DevOps 6a
Kim itSMF New England: ITIL at Ludicrous Speeds - Rugged DevOps 6a
Gene Kim
 
Kim IT Pro Forum Eugene: IT at Ludicrous Speeds - rugged dev ops
Kim IT Pro Forum Eugene: IT at Ludicrous Speeds - rugged dev opsKim IT Pro Forum Eugene: IT at Ludicrous Speeds - rugged dev ops
Kim IT Pro Forum Eugene: IT at Ludicrous Speeds - rugged dev ops
Gene Kim
 
2012 SxSW When IT Says No by Gene Kim
2012 SxSW When IT Says No by Gene Kim2012 SxSW When IT Says No by Gene Kim
2012 SxSW When IT Says No by Gene Kim
Gene Kim
 
The Unicorn Project and The Five Ideals (Updated Dec 2019)
The Unicorn Project and The Five Ideals (Updated Dec 2019)The Unicorn Project and The Five Ideals (Updated Dec 2019)
The Unicorn Project and The Five Ideals (Updated Dec 2019)
Gene Kim
 
DevOps Kanban Meet Up 3/22/12
DevOps Kanban Meet Up 3/22/12DevOps Kanban Meet Up 3/22/12
DevOps Kanban Meet Up 3/22/12
Gene Kim
 
DevOps: Who Will Create $2.6 Trillion In Business Value Per Year?
DevOps: Who Will Create $2.6 Trillion In Business Value Per Year?DevOps: Who Will Create $2.6 Trillion In Business Value Per Year?
DevOps: Who Will Create $2.6 Trillion In Business Value Per Year?
Gene Kim
 
Winnipeg ISACA Security is Dead, Rugged DevOps
Winnipeg ISACA Security is Dead, Rugged DevOpsWinnipeg ISACA Security is Dead, Rugged DevOps
Winnipeg ISACA Security is Dead, Rugged DevOps
Gene Kim
 

Similar a How Can We Better Sell DevOps? (20)

SecureWorld Kim - Infosec at Ludicrous Speeds - Rugged DevOps 6a
SecureWorld   Kim - Infosec at Ludicrous Speeds - Rugged DevOps 6aSecureWorld   Kim - Infosec at Ludicrous Speeds - Rugged DevOps 6a
SecureWorld Kim - Infosec at Ludicrous Speeds - Rugged DevOps 6a
 
ServiceNow ITIL at Ludicrous Speeds - Rugged DevOps
ServiceNow  ITIL at Ludicrous Speeds - Rugged DevOpsServiceNow  ITIL at Ludicrous Speeds - Rugged DevOps
ServiceNow ITIL at Ludicrous Speeds - Rugged DevOps
 
Kim itSMF New England: ITIL at Ludicrous Speeds - Rugged DevOps 6a
Kim itSMF New England: ITIL at Ludicrous Speeds - Rugged DevOps 6aKim itSMF New England: ITIL at Ludicrous Speeds - Rugged DevOps 6a
Kim itSMF New England: ITIL at Ludicrous Speeds - Rugged DevOps 6a
 
Kim IT Pro Forum Eugene: IT at Ludicrous Speeds - rugged dev ops
Kim IT Pro Forum Eugene: IT at Ludicrous Speeds - rugged dev opsKim IT Pro Forum Eugene: IT at Ludicrous Speeds - rugged dev ops
Kim IT Pro Forum Eugene: IT at Ludicrous Speeds - rugged dev ops
 
My Top Five DevOps Learnings
My Top Five DevOps LearningsMy Top Five DevOps Learnings
My Top Five DevOps Learnings
 
PuppetConf2012GeneKim
PuppetConf2012GeneKimPuppetConf2012GeneKim
PuppetConf2012GeneKim
 
2012 SxSW When IT Says No by Gene Kim
2012 SxSW When IT Says No by Gene Kim2012 SxSW When IT Says No by Gene Kim
2012 SxSW When IT Says No by Gene Kim
 
2019 Top Lessons Learned Since the Phoenix Project Was Released
2019 Top Lessons Learned Since the Phoenix Project Was Released2019 Top Lessons Learned Since the Phoenix Project Was Released
2019 Top Lessons Learned Since the Phoenix Project Was Released
 
The Unicorn Project and The Five Ideals (Updated Dec 2019)
The Unicorn Project and The Five Ideals (Updated Dec 2019)The Unicorn Project and The Five Ideals (Updated Dec 2019)
The Unicorn Project and The Five Ideals (Updated Dec 2019)
 
DevOps Kanban Meet Up 3/22/12
DevOps Kanban Meet Up 3/22/12DevOps Kanban Meet Up 3/22/12
DevOps Kanban Meet Up 3/22/12
 
Why Everyone Needs DevOps Now: My Fourteen Year Journey Studying High Perform...
Why Everyone Needs DevOps Now: My Fourteen Year Journey Studying High Perform...Why Everyone Needs DevOps Now: My Fourteen Year Journey Studying High Perform...
Why Everyone Needs DevOps Now: My Fourteen Year Journey Studying High Perform...
 
DevOps: Who Will Create $2.6 Trillion In Business Value Per Year?
DevOps: Who Will Create $2.6 Trillion In Business Value Per Year?DevOps: Who Will Create $2.6 Trillion In Business Value Per Year?
DevOps: Who Will Create $2.6 Trillion In Business Value Per Year?
 
Why Everyone Needs DevOps Now - Gene Kim
Why Everyone Needs DevOps Now - Gene KimWhy Everyone Needs DevOps Now - Gene Kim
Why Everyone Needs DevOps Now - Gene Kim
 
Top Lessons Learned While Researching and Writing The DevOps Handbook
Top Lessons Learned While Researching and Writing The DevOps HandbookTop Lessons Learned While Researching and Writing The DevOps Handbook
Top Lessons Learned While Researching and Writing The DevOps Handbook
 
Why Everyone Needs DevOps Now: 15 Year Study Of High Performing Technology Orgs
Why Everyone Needs DevOps Now: 15 Year Study Of High Performing Technology OrgsWhy Everyone Needs DevOps Now: 15 Year Study Of High Performing Technology Orgs
Why Everyone Needs DevOps Now: 15 Year Study Of High Performing Technology Orgs
 
When IT Fails The Business Fails...
When IT Fails The Business Fails...When IT Fails The Business Fails...
When IT Fails The Business Fails...
 
Winnipeg ISACA Security is Dead, Rugged DevOps
Winnipeg ISACA Security is Dead, Rugged DevOpsWinnipeg ISACA Security is Dead, Rugged DevOps
Winnipeg ISACA Security is Dead, Rugged DevOps
 
Myths
MythsMyths
Myths
 
DevOps Patterns Distilled: Implementing The Needed Practices In Practical Steps
DevOps Patterns Distilled: Implementing The Needed Practices In Practical StepsDevOps Patterns Distilled: Implementing The Needed Practices In Practical Steps
DevOps Patterns Distilled: Implementing The Needed Practices In Practical Steps
 
Top Lessons Learned From The DevOps Handbook
Top Lessons Learned From The DevOps HandbookTop Lessons Learned From The DevOps Handbook
Top Lessons Learned From The DevOps Handbook
 

Más de Gene Kim

2019 12 Clojure/conj: Love Letter To Clojure, and A Datomic Experience Report
2019 12 Clojure/conj: Love Letter To Clojure, and A Datomic Experience Report2019 12 Clojure/conj: Love Letter To Clojure, and A Datomic Experience Report
2019 12 Clojure/conj: Love Letter To Clojure, and A Datomic Experience Report
Gene Kim
 
The Unicorn Project and The Five Ideals (older: see notes for newer version)
The Unicorn Project and The Five Ideals (older: see notes for newer version)The Unicorn Project and The Five Ideals (older: see notes for newer version)
The Unicorn Project and The Five Ideals (older: see notes for newer version)
Gene Kim
 
Kevin Behr: Integrating Controls and Process Improvement
Kevin Behr: Integrating Controls and Process ImprovementKevin Behr: Integrating Controls and Process Improvement
Kevin Behr: Integrating Controls and Process Improvement
Gene Kim
 
Infosec at Ludicrous Speeds - Rugged DevOps
Infosec at Ludicrous Speeds - Rugged DevOps Infosec at Ludicrous Speeds - Rugged DevOps
Infosec at Ludicrous Speeds - Rugged DevOps
Gene Kim
 
2012 05 corp fin 1c
2012 05 corp fin 1c2012 05 corp fin 1c
2012 05 corp fin 1c
Gene Kim
 
SecureWorld: Security is Dead, Rugged DevOps 1f
SecureWorld:  Security is Dead, Rugged DevOps 1fSecureWorld:  Security is Dead, Rugged DevOps 1f
SecureWorld: Security is Dead, Rugged DevOps 1f
Gene Kim
 
2011 09 19 LSPE Dev Ops Cookbook 1a
2011 09 19 LSPE Dev Ops Cookbook 1a2011 09 19 LSPE Dev Ops Cookbook 1a
2011 09 19 LSPE Dev Ops Cookbook 1a
Gene Kim
 

Más de Gene Kim (15)

Speaker Recording Tips For Virtual DevOps Enterprise (And Why We're Pre-Recor...
Speaker Recording Tips For Virtual DevOps Enterprise (And Why We're Pre-Recor...Speaker Recording Tips For Virtual DevOps Enterprise (And Why We're Pre-Recor...
Speaker Recording Tips For Virtual DevOps Enterprise (And Why We're Pre-Recor...
 
2019 12 Clojure/conj: Love Letter To Clojure, and A Datomic Experience Report
2019 12 Clojure/conj: Love Letter To Clojure, and A Datomic Experience Report2019 12 Clojure/conj: Love Letter To Clojure, and A Datomic Experience Report
2019 12 Clojure/conj: Love Letter To Clojure, and A Datomic Experience Report
 
GitHub Universe: 2019: Exemplars, Laggards, and Hoarders A Data-driven Look a...
GitHub Universe: 2019: Exemplars, Laggards, and Hoarders A Data-driven Look a...GitHub Universe: 2019: Exemplars, Laggards, and Hoarders A Data-driven Look a...
GitHub Universe: 2019: Exemplars, Laggards, and Hoarders A Data-driven Look a...
 
The Unicorn Project and The Five Ideals (older: see notes for newer version)
The Unicorn Project and The Five Ideals (older: see notes for newer version)The Unicorn Project and The Five Ideals (older: see notes for newer version)
The Unicorn Project and The Five Ideals (older: see notes for newer version)
 
Keeping The Auditor Away: DevOps Audit Compliance Case Studies
Keeping The Auditor Away: DevOps Audit Compliance Case StudiesKeeping The Auditor Away: DevOps Audit Compliance Case Studies
Keeping The Auditor Away: DevOps Audit Compliance Case Studies
 
2014 State Of DevOps Findings! Velocity Conference
2014 State Of DevOps Findings! Velocity Conference2014 State Of DevOps Findings! Velocity Conference
2014 State Of DevOps Findings! Velocity Conference
 
Kevin Behr: Integrating Controls and Process Improvement
Kevin Behr: Integrating Controls and Process ImprovementKevin Behr: Integrating Controls and Process Improvement
Kevin Behr: Integrating Controls and Process Improvement
 
SecureWorld - Communicating With Your CFO
SecureWorld - Communicating With Your CFOSecureWorld - Communicating With Your CFO
SecureWorld - Communicating With Your CFO
 
2012 Velocity London: DevOps Patterns Distilled
2012 Velocity London: DevOps Patterns Distilled2012 Velocity London: DevOps Patterns Distilled
2012 Velocity London: DevOps Patterns Distilled
 
United2012 Rugged DevOps Rocks
United2012 Rugged DevOps RocksUnited2012 Rugged DevOps Rocks
United2012 Rugged DevOps Rocks
 
Infosec at Ludicrous Speeds - Rugged DevOps
Infosec at Ludicrous Speeds - Rugged DevOps Infosec at Ludicrous Speeds - Rugged DevOps
Infosec at Ludicrous Speeds - Rugged DevOps
 
2012 05 corp fin 1c
2012 05 corp fin 1c2012 05 corp fin 1c
2012 05 corp fin 1c
 
SecureWorld: Security is Dead, Rugged DevOps 1f
SecureWorld:  Security is Dead, Rugged DevOps 1fSecureWorld:  Security is Dead, Rugged DevOps 1f
SecureWorld: Security is Dead, Rugged DevOps 1f
 
Security is Dead. Long Live Rugged DevOps: IT at Ludicrous Speed
Security is Dead. Long Live Rugged DevOps: IT at Ludicrous SpeedSecurity is Dead. Long Live Rugged DevOps: IT at Ludicrous Speed
Security is Dead. Long Live Rugged DevOps: IT at Ludicrous Speed
 
2011 09 19 LSPE Dev Ops Cookbook 1a
2011 09 19 LSPE Dev Ops Cookbook 1a2011 09 19 LSPE Dev Ops Cookbook 1a
2011 09 19 LSPE Dev Ops Cookbook 1a
 

Último

Modular Monolith - a Practical Alternative to Microservices @ Devoxx UK 2024
Modular Monolith - a Practical Alternative to Microservices @ Devoxx UK 2024Modular Monolith - a Practical Alternative to Microservices @ Devoxx UK 2024
Modular Monolith - a Practical Alternative to Microservices @ Devoxx UK 2024
Victor Rentea
 
Architecting Cloud Native Applications
Architecting Cloud Native ApplicationsArchitecting Cloud Native Applications
Architecting Cloud Native Applications
WSO2
 
Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME
Cloud Frontiers:  A Deep Dive into Serverless Spatial Data and FMECloud Frontiers:  A Deep Dive into Serverless Spatial Data and FME
Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME
Safe Software
 

Último (20)

Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff
Strategize a Smooth Tenant-to-tenant Migration and Copilot TakeoffStrategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff
Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff
 
Apidays New York 2024 - The value of a flexible API Management solution for O...
Apidays New York 2024 - The value of a flexible API Management solution for O...Apidays New York 2024 - The value of a flexible API Management solution for O...
Apidays New York 2024 - The value of a flexible API Management solution for O...
 
EMPOWERMENT TECHNOLOGY GRADE 11 QUARTER 2 REVIEWER
EMPOWERMENT TECHNOLOGY GRADE 11 QUARTER 2 REVIEWEREMPOWERMENT TECHNOLOGY GRADE 11 QUARTER 2 REVIEWER
EMPOWERMENT TECHNOLOGY GRADE 11 QUARTER 2 REVIEWER
 
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemkeProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke
 
ICT role in 21st century education and its challenges
ICT role in 21st century education and its challengesICT role in 21st century education and its challenges
ICT role in 21st century education and its challenges
 
Corporate and higher education May webinar.pptx
Corporate and higher education May webinar.pptxCorporate and higher education May webinar.pptx
Corporate and higher education May webinar.pptx
 
TrustArc Webinar - Unlock the Power of AI-Driven Data Discovery
TrustArc Webinar - Unlock the Power of AI-Driven Data DiscoveryTrustArc Webinar - Unlock the Power of AI-Driven Data Discovery
TrustArc Webinar - Unlock the Power of AI-Driven Data Discovery
 
How to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected WorkerHow to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected Worker
 
[BuildWithAI] Introduction to Gemini.pdf
[BuildWithAI] Introduction to Gemini.pdf[BuildWithAI] Introduction to Gemini.pdf
[BuildWithAI] Introduction to Gemini.pdf
 
Connector Corner: Accelerate revenue generation using UiPath API-centric busi...
Connector Corner: Accelerate revenue generation using UiPath API-centric busi...Connector Corner: Accelerate revenue generation using UiPath API-centric busi...
Connector Corner: Accelerate revenue generation using UiPath API-centric busi...
 
presentation ICT roal in 21st century education
presentation ICT roal in 21st century educationpresentation ICT roal in 21st century education
presentation ICT roal in 21st century education
 
Repurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost Saving
Repurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost SavingRepurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost Saving
Repurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost Saving
 
Artificial Intelligence Chap.5 : Uncertainty
Artificial Intelligence Chap.5 : UncertaintyArtificial Intelligence Chap.5 : Uncertainty
Artificial Intelligence Chap.5 : Uncertainty
 
WSO2's API Vision: Unifying Control, Empowering Developers
WSO2's API Vision: Unifying Control, Empowering DevelopersWSO2's API Vision: Unifying Control, Empowering Developers
WSO2's API Vision: Unifying Control, Empowering Developers
 
Modular Monolith - a Practical Alternative to Microservices @ Devoxx UK 2024
Modular Monolith - a Practical Alternative to Microservices @ Devoxx UK 2024Modular Monolith - a Practical Alternative to Microservices @ Devoxx UK 2024
Modular Monolith - a Practical Alternative to Microservices @ Devoxx UK 2024
 
Rising Above_ Dubai Floods and the Fortitude of Dubai International Airport.pdf
Rising Above_ Dubai Floods and the Fortitude of Dubai International Airport.pdfRising Above_ Dubai Floods and the Fortitude of Dubai International Airport.pdf
Rising Above_ Dubai Floods and the Fortitude of Dubai International Airport.pdf
 
Architecting Cloud Native Applications
Architecting Cloud Native ApplicationsArchitecting Cloud Native Applications
Architecting Cloud Native Applications
 
Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...
Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...
Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...
 
Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME
Cloud Frontiers:  A Deep Dive into Serverless Spatial Data and FMECloud Frontiers:  A Deep Dive into Serverless Spatial Data and FME
Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME
 
Biography Of Angeliki Cooney | Senior Vice President Life Sciences | Albany, ...
Biography Of Angeliki Cooney | Senior Vice President Life Sciences | Albany, ...Biography Of Angeliki Cooney | Senior Vice President Life Sciences | Albany, ...
Biography Of Angeliki Cooney | Senior Vice President Life Sciences | Albany, ...
 

How Can We Better Sell DevOps?

  • 1. Session ID: @RealGeneKim, genek@realgenekim.me How Do We Better Sell DevOps? Gene Kim
  • 2. @RealGeneKim Act I: IT Ops Fixing Fragile Artifacts
  • 8. @RealGeneKim IT Ops And Dev At War 11
  • 12. Act 3: There Must Be A Better Way… 15
  • 15. How Do We Help Others Achieve Their Own “Aha” Moments? 30
  • 17. @RealGeneKim Eric Passmore, former SVP Global Engineering, AOL (2007) 32
  • 18. The Downward Spiral Operations Sees…  Fragile applications are prone to failure  Long time required to figure out “which bit got flipped”  Detective control is a salesperson  Too much time required to restore service  Too much firefighting and unplanned work  Planned project work cannot complete  Frustrated customers leave  Market share goes down  Business misses Wall Street commitments  Business makes even larger promises to Wall Street Dev Sees…  More urgent, date-driven projects put into the queue  Even more fragile code put into production  More releases have increasingly “turbulent installs”  Release cycles lengthen to amortize “cost of deployments”  Failing bigger deployments more difficult to diagnose  Most senior and constrained IT ops resources have less time to fix underlying process problems  Ever increasing backlog of infrastructure projects that could fix root cause and reduce costs  Ever increasing amount of tension between IT Ops and Development These aren’t IT Operations problems… These are business problems!
  • 20. @RealGeneKim Stages Of Value Selling  Problem  Significance  Solution  Value 35
  • 21. @RealGeneKim Easy Lines To Get Started  Problem  “What’s the difference between a good day and a bad day?”  “What keeps you up at night?” 36
  • 22. @RealGeneKim Easy Lines To Get Started  Significance  “Does anyone really care if that bad thing happens?”  “On a scale of 1-10, how big of a problem is this?”  “So what?” 37
  • 23. @RealGeneKim Easy Lines To Get Started  Solution  “If you could wave a magic wand, what would you do?”  “If you were king/queen, what would it look like?” 38
  • 24. @RealGeneKim Easy Lines To Get Started  Value  “What’s in it for you?”  “In six months, if all this comes true, what does life look like for you?” 39
  • 25. @RealGeneKim Stages Of Value Selling  Problem  Significance  Solution  Value 40 When you do this, it should give you confidence that you’re not wasting anyone’s time.
  • 26. The Downward Spiral Operations Sees…  Fragile applications are prone to failure  Long time required to figure out “which bit got flipped”  Detective control is a salesperson  Too much time required to restore service  Too much firefighting and unplanned work  Planned project work cannot complete  Frustrated customers leave  Market share goes down  Business misses Wall Street commitments  Business makes even larger promises to Wall Street Dev Sees…  More urgent, date-driven projects put into the queue  Even more fragile code put into production  More releases have increasingly “turbulent installs”  Release cycles lengthen to amortize “cost of deployments”  Failing bigger deployments more difficult to diagnose  Most senior and constrained IT ops resources have less time to fix underlying process problems  Ever increasing backlog of infrastructure projects that could fix root cause and reduce costs  Ever increasing amount of tension between IT Ops and Development These aren’t IT Operations problems… These are business problems!
  • 27. More Patterns And Members Of The Tribe We Need To Recruit 42
  • 28. @RealGeneKim Gene Kim, CTO, Tripwire, Inc. (2006) 43
  • 29. The Downward Spiral Operations Sees…  Fragile applications are prone to failure  Long time required to figure out “which bit got flipped”  Detective control is a salesperson  Too much time required to restore service  Too much firefighting and unplanned work  Planned project work cannot complete  Frustrated customers leave  Market share goes down  Business misses Wall Street commitments  Business makes even larger promises to Wall Street Dev Sees…  More urgent, date-driven projects put into the queue  Even more fragile code put into production  More releases have increasingly “turbulent installs”  Release cycles lengthen to amortize “cost of deployments”  Failing bigger deployments more difficult to diagnose  Most senior and constrained IT ops resources have less time to fix underlying process problems  Ever increasing backlog of infrastructure projects that could fix root cause and reduce costs  Ever increasing amount of tension between IT Ops and Development These aren’t IT Operations problems… These are business problems!
  • 31. The Downward Spiral Operations Sees…  Fragile applications are prone to failure  Long time required to figure out “which bit got flipped”  Detective control is a salesperson  Too much time required to restore service  Too much firefighting and unplanned work  Planned project work cannot complete  Frustrated customers leave  Market share goes down  Business misses Wall Street commitments  Business makes even larger promises to Wall Street Dev Sees…  More urgent, date-driven projects put into the queue  Even more fragile code put into production  More releases have increasingly “turbulent installs”  Release cycles lengthen to amortize “cost of deployments”  Failing bigger deployments more difficult to diagnose  Most senior and constrained IT ops resources have less time to fix underlying process problems  Ever increasing backlog of infrastructure projects that could fix root cause and reduce costs  Ever increasing amount of tension between IT Ops and Development These aren’t IT Operations problems… These are business problems!
  • 34. @RealGeneKim Justin Collins, Neil Matatall and Alex Smolen from Twitter 49
  • 35. @RealGeneKim Value To Infosec  Integrate security testing into daily Dev work  Reduce time from “find to fix”  Reduce surface area of risk  Non-functional requirements (Anonymous can do 6 GB/sec DDoS: how can we survive it?)  Enforce consistency  Build in auditability  Have reliance on IT Ops tools in daily use  Traceability of production artifacts 50
  • 36. The Downward Spiral Operations Sees…  Fragile applications are prone to failure  Long time required to figure out “which bit got flipped”  Detective control is a salesperson  Too much time required to restore service  Too much firefighting and unplanned work  Planned project work cannot complete  Frustrated customers leave  Market share goes down  Business misses Wall Street commitments  Business makes even larger promises to Wall Street Dev Sees…  More urgent, date-driven projects put into the queue  Even more fragile code put into production  More releases have increasingly “turbulent installs”  Release cycles lengthen to amortize “cost of deployments”  Failing bigger deployments more difficult to diagnose  Most senior and constrained IT ops resources have less time to fix underlying process problems  Ever increasing backlog of infrastructure projects that could fix root cause and reduce costs  Ever increasing amount of tension between IT Ops and Development These aren’t IT Operations problems… These are business problems!
  • 41. @RealGeneKim Our Desired Future Reality  Installs are predictable and require less time/effort than ever  Engineering teams take decisive steps to correct bad installs (and they don’t happen again)  We are deploying code faster than ever, and can quickly detect and recover  We have operational discipline to enforce a structured resolution process  Less unexpected downtime  Schedule and complete infrastructure improvement projects  Bad installs rarely have a cascading effect  Business unit releases are on schedule (vs delayed)  Customers rarely leave  We’re winning customers  We exceed our 20% growth target  Our business hitting earnings targets  We can tackle even more projects, hire more stars, etc. 56
  • 42. @RealGeneKim High Performing DevOps Teams  They’re more agile  30x more frequent deployments  8,000x faster cycle time than their peers  They’re more reliable  2x the change success rate  12x faster MTTR Source: Puppet Labs 2012 State Of DevOps: http://puppetlabs.com/2013-state-of-devops-infographic
  • 43. 58 How organizations achieve high performance • 89% have infrastructure artifacts in version control • 82% have automated process to create environments Source: Puppet Las 2012 DevOps Survey Of Practice
  • 44. 59 Performance by DevOps maturity Organizations that implemented DevOps practices over 12 months ago were 5x more likely to be high performing than organizations that weren’t implementing DevOps at all. Source: Puppet Las 2012 DevOps Survey Of Practice
  • 45. @RealGeneKim Who Is Doing DevOps?  Google, Amazon, Netflix, Etsy, Twitter, Facebook , Pinterest …  BNY Mellon, Bank of America, World Bank, Paychex, Intuit…  The Gap, Nordstrom, REI, Macy’s, GameStop, …  Portland State University, Seton Hill University, Kansas State University…  Who else? 60
  • 46. @RealGeneKim Who Is Doing DevOps?  Google, Amazon, Netflix, Etsy, Twitter, Facebook , Pinterest …  BNY Mellon, Bank of America, World Bank, Paychex, Intuit…  The Gap, Nordstrom, REI, Macy’s, GameStop, …  Portland State University, Seton Hill University, Kansas State University…  Who else? 61
  • 50. @RealGeneKim 65 “This book will have a profound effect on IT, just as The Goal did for manufacturing.” --Jez Humble, co-author Continuous Delivery “This is the IT swamp draining manual for anyone who is neck deep in alligators.” --Adrian Cockroft, Cloud Architect at Netflix “This is The Goal for our decade, and is for any IT professional who wants their life back.” --Charles Betz, IT architect, author “Architecture and Patterns for IT”
  • 51. Why Do I Think This Is Important? 113
  • 55. @RealGeneKim If I Could Wave A Magic Wand, Everyone Will…  Be energized about how practitioners can contribute in this organizational journey  Leave with some concrete steps to get some great outcomes  Help create the coalition that starts putting DevOps practices into place 117
  • 56. @RealGeneKim 119 “Some books you give to friends, for the joy of sharing a great novel. “Some books you recommend to your colleagues and employees, to create common ground. “Some books you share with your boss, to plant the seeds of a big idea. “The Phoenix Project is all three.” --Jeremiah Shirk, Integration & Infrastructure Manager at Kansas State University
  • 57. @RealGeneKim Our Mission: Positively Impact The Lives Of One Million IT Workers By 2017  Free 170 page excerpt:http://itrevolution.com/the- phoenix-project-excerpt/  http://slideshare.net/realgenekim  DevOps Defensive Audit Toolkit  Enterprise DevOps Case Studies  Early draft of upcoming “DevOps Cookbook” (Allspaw, DeBois, Edwards, Humble, Kim , Orzen)  Email me at genek@realgenekim.me

Notas del editor

  1.  In fact, I think this destructive pattern is the root cause of one of the biggest problems we face, both as a profession, but has the potential to generate more economic value than anything we’ve seen in 30 years. I’m going to share with you what this destructive pattern is, and maybe it’ll sound familiar to you... It’s a story that can be told in four Acts
  2. Who are they auditing? IT operations.I love IT operatoins. Why? Because when the developers screw up, the only people who can save the day are the IT operations people. Memory leak? No problem, we’ll do hourly reboots until you figure that out.Who here is from IT operations?Bad day:Not as prepared for the audit as they thoughtSpending 30% of their time scrambling, generating presentation for auditorsOr an outage, and the developer is adamant that they didn’t make the change – they’re saying, “it must be the security guys – they’re always causing outages”Or, there’s 50 systems behind the load balancer, and six systems are acting funny – what different, and who made them differentOr every server is like a snowflake, each having their own personalityWe as Tripwire practitioners can help them make sure changes are made visible, authorized, deployed completely and accurately, find differencesCreate and enforce a culture of change management and causality
  3. Source: Flickr: birdsandanchors
  4. Who’s introducing variance? Well, it’s often these guys. Show me a developer who isn’t causing an outage, I’ll show you one who is on vacation.Primary measurement is deploy features quickly – get to market.I’ve worked with two of the five largest Internet companies (Google, Microsoft, Yahoo, AOL, Amazon), and I now believe that the biggest differentiator to great time to market is great operations:Bad day: We do 6 weeks of testing, but deployment still fails. Why? QA environment doesn’t match productionOr there’s a failure in testing, and no one can agree whether it’s a code failure or an environment failureOr changes are made in QA, but no one wrote them down, so they didn’t get replicated downstream in productionBelieve it or not, we as Tripwire practitioners can even help them – make sure environments are available when we need them, that they’re properly configured correctly the first time, document all the changes, replicate them downstream
  5. [ picture of messy data center ] Ten minutes into Bill’s first day on the job, he has to deal with a payroll run failure. Tomorrow is payday, and finance just found out that while all the salaried employees are going to get paid, none of the hourly factory employees will. All their records from the factory timekeeping systems were zeroed out.Was it a SAN failure? A database failure? An application failure? Interface failure? Cabling error?
  6. Source: http://biobreak.wordpress.com/2010/10/07/games-evangelism-dos-and-donts/
  7. So who are all these constituencies that we can help, and increase our relevance as Tripwire practitioners and champions?How many people here are in infosec?Goal: protect critical systems and dataSafeguard organizational commitmentsPrevent security breaches, help quickly detect and recover from themBad day: no security standardsNo one is complyingYes, we’re 3 years behind. “Whaddyagonna do about it?”Vs. we (Tripwire owner) can become more relevant and add value by help infosec by leveraging all the configuration guidance out thereMeasure variance between produciton and those known good statesTrust and verify that when management says, we’ve trued up the configurations, they’ve actually done itWhy? Now, more than ever, there are an ever increasing amount of regulatory and contractual requirements to protect systems and data
  8. There are many ways to react to this: like, fear, horror, trying to become invisible… All understandable, given the circumstances…Because infosec can no longer take 4 weeks to turn around a security review for application code, or take 6 weeks to turnaround a firewall change. But, on the other hand, I think it’s will be the best thing to ever happen to infosec in the past 20 years. We’re calling this Rugged DevOps, because it’s a way for infosec to integrate into the DevOps process, and be welcomed. And not be viewed as the shrill hysterical folks who slow the business down.
  9. Tell story of Amazon, Netflix: they care about, availability, securityIt’s not a push, it’s a pull – they’re looking for our help (#1 concern: fear of disintermediation and being marginalized)
  10. There are many ways to react to this: like, fear, horror, trying to become invisible… All understandable, given the circumstances…Because infosec can no longer take 4 weeks to turn around a security review for application code, or take 6 weeks to turnaround a firewall change. But, on the other hand, I think it’s will be the best thing to ever happen to infosec in the past 20 years. We’re calling this Rugged DevOps, because it’s a way for infosec to integrate into the DevOps process, and be welcomed. And not be viewed as the shrill hysterical folks who slow the business down.
  11. How each side Actively impedes the achievement of each other’s goals.
  12. Two things:Arguing with him was like arguing with columbo: he was always five steps ahead of you, and he was so disarming“Before I can trust you, I first need to know you care”“Genuine Curiousity”: He integrated patterns so much into the fiber of his being
  13. How each side Actively impedes the achievement of each other’s goals.
  14. That’sJez Humble of “Continuous Delivery” fame (@jezhumble) in the picture and me sitting together at PuppetConf 2012. 
  15. How each side Actively impedes the achievement of each other’s goals.
  16. How each side Actively impedes the achievement of each other’s goals.
  17. How each side Actively impedes the achievement of each other’s goals.
  18. All of that code has moved to our B2 repoExplosive growth in B2 development internally.5x growthWe aren't just saying we are using B2s - we're doing it every single day.
  19. The Goal introduces the Theory of Constraints, has been the most influential book in Gene’s career. Book taught in most MBA programs. What I love about the Goal, is that it’s a Novel. It’s the story about Alex, who is a Plant Manager. He has to fix the Cost and Due date issues in 90 days, otherwise the plant will be shut down. You live the word through Alex’s eyes, where he discovers almost everything he believes about plant management is wrong and pre-destined for failure. You meet his wife and children, and his great epiphany is actually out on a Gene asked me to read an early copy of When IT Fails, a Business Novel: and just like the Goal, it’s a novel and the first 170 pages describe the problems the company and IT team is facing, from multiple perspectives. It’s an engaging story earns us the right to describe what the solution should look like. Gene, why did you and the co-authors model the book so closely on The Goal?The solution to any complex business problem requires different stakeholders, and in order to do that you first need empathy of what the problem looks like from Operation, Development, Security, Service Management and the Business.
  20. The Goal introduces the Theory of Constraints, has been the most influential book in Gene’s career. Book taught in most MBA programs. What I love about the Goal, is that it’s a Novel. It’s the story about Alex, who is a Plant Manager. He has to fix the Cost and Due date issues in 90 days, otherwise the plant will be shut down. You live the word through Alex’s eyes, where he discovers almost everything he believes about plant management is wrong and pre-destined for failure. You meet his wife and children, and his great epiphany is actually out on a Gene asked me to read an early copy of When IT Fails, a Business Novel: and just like the Goal, it’s a novel and the first 170 pages describe the problems the company and IT team is facing, from multiple perspectives. It’s an engaging story earns us the right to describe what the solution should look like. Gene, why did you and the co-authors model the book so closely on The Goal?The solution to any complex business problem requires different stakeholders, and in order to do that you first need empathy of what the problem looks like from Operation, Development, Security, Service Management and the Business.
  21. EranFeigenbaumDirector of Security, Google Enterprise
  22. [ picture of messy data center ] Ten minutes into Bill’s first day on the job, he has to deal with a payroll run failure. Tomorrow is payday, and finance just found out that while all the salaried employees are going to get paid, none of the hourly factory employees will. All their records from the factory timekeeping systems were zeroed out.Was it a SAN failure? A database failure? An application failure? Interface failure? Cabling error?
  23. All of that code has moved to our B2 repoExplosive growth in B2 development internally.5x growthWe aren't just saying we are using B2s - we're doing it every single day.