DevOps @ Scale

DevOps @ Scale Grab’n Go 2021 Steffen Wirenfeldt Karlsson and Tim Klinke

Agenda 1 DevOps - more than CI/CD? 2 DevOps journey 3 The role of platforms 4 Deloitte DevOps Cloud Platform (DCP) DevOps @ Scale 2

DevOps – more than CI/CD? 3

DevOps is the union of people, process, and tools to enable continuous delivery of value to our end users. Donovan Brown, Microsoft DevOps Program Manager Deloitte 2021 4

Optimize for speed People Deloitte 2021 Process Tools Bring people together Deliver value faster DevOps Strategy Collaborate more Share common goals Focus on improvement Eliminate waste Increase efficiency Streamline Feedback Enhance productivity Enable collaboration Facilitate experimentation 5

The 7 DevOps habits to master at team level and scale throughout the organization Team Autonomy and Enterprise Alignment Rigorous Management of Technical Debt Live Site Culture Hypothesis Driven Development Manage Infrastructure as a Flexible Resource Focus on Flow of Customer Value Evidence Gathered in Production Deloitte 2021 66

The 7 DevOps practices to master at team level and scale throughout the organization Configuration Management Continuous Integration Application Performance Monitoring Test Automation Continuous Deployment Release Management Infrastructure as Code Deloitte 2021 77

DevOps is popular. Perhaps a few years from now, the term “DevOps” will sound quaint — even fade away — because so many people and organizations have fully adopted the DevOps principles of collaboration, communication, small-batch iteration, feedback loops, continuous learning and improvement. 2020 State of DevOps Report Deloitte 2021 8

DevOps journey 9

PACE: Four pivots on the path to DevSecOps. Increasing Agility Governance (Embedded Security) Efficiency Business Value Measuring Success (KPIs, SLAs, etc.) Reducing Toil Deloitte 2021 10

Scaling DevOps is the critical part of the journey Standardize across several teams. Create trust. Normalization Start with version control, automated test, CI/CD. Standardization Automate everything (security policies, infrastructure). Expansion Remove manual approvals from outside the team. IaC, tested infrastructure changes. Automated Self-service Mature self-service platform. Source: 2020 State of DevOps Report Deloitte 2021 11 11

Challenges for scaling DevOps Lack of standardized technologies and processes E2E Product teams don’t scale well Decreased efficiency through context switching Teams can’t be granted enough autonomy Deloitte 2021 12 12

The role of platforms 13

DevOps evolution and (self-service) platform evolution go together Self service for: Low maturity CI/CD workflows internal infrastructure public cloud infrastructure. Self service for: Medium maturity Development environments Monitoring Alerting Self service for: High maturity Deployment patterns Database provisioning Audit logging. 2020 State of DevOps Report Deloitte 2021 14 14

Why do organizations struggle to provide this kind of platform? Lack of technical skills Platform is seen as a project instead of team Deloitte 2021 Lack of time Unclear organizational structures 15 15

Deloitte DevOps Cloud Platform 16

The most common limitations are time and niche skills. This is where we can help you. Deloitte 2021 17

Today’s software development, delivery and management lifecycle is too complicated Design & Development Release Automation On Demand Continuous Environments Testing Security Compliance Progress Reporting Application Monitoring Application Continuous Performance Improvement This part of the lifecycle can and should be simplified Deloitte 2021 18 18

A selection of problems DCP can solve for you Lack of visibility on Digital or Product Delivery Initiatives? Inability to track DevSecOps Best Practices and compliance? Deloitte 2021 Digital Benchmarking and Insights DevSecOps Workflow Orchestration Challenges with DevSecOps Maturity? ML driven cost optimization Expensive cloud bills? DevSecOps Rules 19 19

You just ask DCP what you want and get it .as simple as that Developer DCP, am I meeting my KPIs for this month? CIO / CTO Enterprise Architect DCP, am I on time to release my social media feature? DCP, did the last CI-CD for app XYZ comply with SOX rules? Security Officer Operations Manager Deloitte 2021 DCP, what is the efficiency for my app XYZ? QA Manager Compliance Officer DCP, what is the security score for the app XYZ DCP, how are we doing with standardizing microservices? Product Manager Engineering Manager DCP, what are the results of my last testing job app XYZ on Selenium for latest social media feature? DCP, setup my tool chain and CI-CD pipeline. DCP, how much can I save on cloud spend this month? 20 20

Different capabilities of DCP AI OPS CONTINUOUS DEPLOYMENT FOR ANY CLOUD DASHBOARDING KUBERNETES AS A SERVICE CONTINUOUS SECURITY DCP CONTINUOUS IMPROVEMENT / OPTIMIZATION MULTI CLOUD MANAGEMENT APPLICATION MODERNIZATION SCRIPTLESS AUTOMATION APPLICATION MIGRATION VALUE STREAM MAPPING Deloitte 2021 21

Activities on different maturity levels on a DevOps journey Low Maturity Medium Maturity Continuous testing Code quality Build automation / CI Code repo and branching 1 Branching strategy Security testing KPIs & metrics tracking Deployment / provisioning automation 3 High Maturity Continuous deployment / advanced deployment Compliance models automation Continuous monitoring Continuous optimization 4 4 3 3 3 3 2 2 1 1 Deloitte 2021 22 22

We invite you to have a conversation with us about your DevOps journey. Deloitte 2021 23

Deloitte 2021 Tim Klinke Steffen Karlsson Consultant Manager Systems Engineering Core Business Operations Systems Engineering Core Business Operations tklinke@deloitte.dk stkarlsson@deloitte.dk Deloitte Consulting Denmark Deloitte Consulting Denmark 24

This communication contains general information only, and none of Deloitte Touche Tohmatsu Limited (“DTTL”), its global network of member firms or their related entities (collectively, the “Deloitte organization”) is, by means of this communication, rendering professional advice or services. Before making any decision or taking any action that may affect your finances or your business, you should consult a qualified professional adviser. No representations, warranties or undertakings (express or implied) are given as to the accuracy or completeness of the information in this communication, and none of DTTL, its member firms, related entities, employees or agents shall be liable or responsible for any loss or damage whatsoever arising directly or indirectly in connection with any person relying on this communication. DTTL and each of its member firms, and their related entities, are legally separate and independent entities. Deloitte is a leading global provider of audit and assurance, consulting, financial advisory, risk advisory, tax and related services. Our global network of member firms and related entities in more than 150 countries and territories (collectively, the “Deloitte organization”) serves four out of five Fortune Global 500 companies. Learn how Deloitte’s approximately 330,000 people make an impact that matters at www.deloitte.com. Deloitte refers to one or more of Deloitte Touche Tohmatsu Limited (“DTTL”), its global network of member firms, and their related entities (collectively, the “Deloitte organization”). DTTL (also referred to as “Deloitte Global”) and each of its member firms and related entities are legally separate and independent entities, which cannot obligate or bind each other in respect of third parties. DTTL and each DTTL member firm and related entity is liable only for its own acts and omissions, and not those of each other. DTTL does not provide services to clients. Please seewww.deloitte.com/about to learn more. 2021 Deloitte Statsautoriseret Revisionspartnerselskab. For information, contact Deloitte Global.

Continuous testing Security testing Deployment / provisioning automation KPIs & metrics tracking Compliance automation Continuous deployment / advanced deployment models Continuous monitoring Continuous optimization Low Maturity Medium Maturity High Maturity