Continuous Delivery - GSE Young Professionals Continious Delivery.pdf · 2020-06-05 · You can...

$: Continuous Delivery - GSE Young Professionals Continious Delivery.pdf · 2020-06-05 · You can \൰rotect privileged user accounts—the keys to your kingdom—by monitoring and$
Continuous DeliveryJUNE, 2017DIDIER DE COCKCONTINUOUS DELIVERY PRESALES CA TECHNOLOGIES

© 2017 CA. Confidential. All rights reserved.

TODAY, EVERY BUSINESS IS IN THE SOFTWARE BUSINESS

“We see ourselves as a technology company with a banking license.”

Michael Corbat, Citi CEOFebruary 2014

Every new hire at the 305.000 person company will learn to code.

Jeff Immelt, GE CEOAugust 2016

© 2017 CA. Confidential. All rights reserved. 3

IN THE SOFTWARE BUSINESS, EXPERIENCE IS EVERYTHING

And…

Fact: 83% of U.S. consumers say having a positive customer experience with a brand is more important than the product itself1

53% of large companies wantto be customer experience leaders within three years2

Fact: 53% of mobile site visits are abandoned if pages take longer than three secondsto load3

Fact:

Presenter

Presentation Notes

We know that in the software business, experience is everything. 83% US consumers said that having a positive customer experience with a brand is more important than the actual product. And we all know that making customers happy today can be tricky. They’re very sophisticated, with high expectations, and they want to make an emotional connection with your brand. You need to consistently design digital experiences that are easy, adaptable to change with customers’ needs, and provide real value. Most importantly, the experiences that customers have with your brand need to make them feel good. Customer experience has been described as the next competitive battle ground. Getting it right may be one of the most important things you do—and one of your biggest challenges. Sources: 1 83% of U.S. consumers say having a positive customer experience with a brand is more important than the product itself — Harris Poll of US consumers https://www.lithium.com/pdfs/infographic/lithium_the_value_of_a_happy_customer.pdf 253% of large companies want to be customer experience leaders within three years Base: 210 global companies with $500M or more in annual revenues, Temkin Group Q1 2016 CX Mgt. Survey 3https://www.doubleclickbygoogle.com/articles/mobile-speed-matters/ Google Data, Aggregated, anonymized Google Analytics data from a sample of mWeb sites opted into sharing benchmark data, n=3.7K, Global, March 2016


WINNING COMPANIES FOCUS ON FOUR KEY PRINCIPLES

Agilityto speed time

to market.

Automationfor greater

velocity and quality.

Insightsto constantly

improve and spot opportunity.

Securityto provide safe,

frictionless access.

We know that

Presenter

Presentation Notes

We’ve learned that winning companies focus on four key principles: Agility, Automation, Insights and Security. Agility isn’t just for development. Driving full scale agile adoption across every team reshapes how your organization operates, so that everyone works collaboratively to turn new ideas into new customer value. Agile practices promote broad information sharing, to inform decisions about prioritizing customers’ needs. Agile keeps everyone connected to the voice of the customer. Adding robust API strategies ensures modern, scalable, and resilient applications that are easier to build and maintain, cost less to develop, and speed time to market. If you’re using agile to develop apps faster, automating test and release processes is imperative—to keep pace, maintain velocity, and ensure high quality. With continuous testing capabilities, you can define and manage requirements faster and with far less effort. And you can simulate real-world conditions, so automated testing can begin much earlier, and yield high-quality results quickly. With an open, integrated framework that automates and orchestrates the entire SDLC, you can achieve continuous delivery, and create a constant flow of new customer value. Metrics and analysis must be integrated into the entire software process, from design to delivery. With smart analytics, you can turn the data you collect into insights that help put your customers at the center of your business. By measuring the success of your pipeline, you can find areas to optimize. Continuously monitoring and analyzing application performance enables you to catch potential problems before they impact customers, and fix them quickly. Measuring and analyzing customer engagement is key to optimizing performance and uncovering unmet needs to create new value. Securing your complex environment needs to be top-of-mind. Tackling today’s increasingly sophisticated and damaging threats requires broad awareness and participation, so security becomes everyone’s job. By focusing on security from the start of the dev process, you can make it a killer feature, an integral part of your dynamic, insightful, and responsive security strategy. Making identity your new perimeter opens your business up so users, employees and partners can access the data they need while actively ensuring maximum data protection and regulatory compliance. You can protect privileged user accounts—the keys to your kingdom—by monitoring and auditing access across the enterprise in a way that doesn’t impact user experience.


ProductConcept

THE MODERN SOFTWARE FACTORYA blueprint for success.

• A modern software factory is agile, built to change and able to adapt to market disruption and customer demand.

• Automation is essential. It saves time, money, and reduces errors, so you can deliver app experiences customers love.

• Insights fuel the factory, you need smart analytics that make the app experiences you deliver better.

• Strong security from the start protects your most valuable assets and builds users trust without getting in the way.

AND DO IT AT SCALE

5

Presenter

Presentation Notes

Agility, Automation, Insights and Security are the critical components of what we call the modern software factory, your blueprint for success. A modern software factory is agile, built to change and adapt to whatever the market throws at you. Agile teams work collaboratively and iteratively to bring new ideas to market, producing the outcomes that matter to customers. Automation is essential, the key to continuously developing, testing and delivering app experiences your customers will love. Automation saves time, money, hassle and reduces errors, so you have more cycles to pursue innovation that creates new value. Insights are the “competitive fuel” that keeps your factory moving in the right direction. Your software can be designed to give you a constant stream of feedback that smart analytics can turn into insights, to make sure the experiences you deliver keep getting better. Strong security is designed into your apps from the beginning, protecting your most valuable assets and building users trust, without getting in the way. A modern software factory excels at all four of these principles, for agility, automation, insights and security at scale—which means that you can consistently deliver the trust, value, speed and reliability that your customers demand. Your modern software factory ensures that your company is ‘built to change,’ and adapt successfully to the increasing turbulence caused by the rapidly accelerating pace of change.


Agility

6


WikipediaThe free, online encyclopedia Wikipedia was a disruptive innovation that had a major impact on both the traditional, for-profit printed paper encyclopedia market (e.g., Encyclopedia Britannica) and the for-profit digital encyclopedia market (e.g., Encarta). The English Wikipedia provides over 5 million articles for free; in contrast, a $1,000 set of Britannica volumes had 120,000 articles.

7


SAFe – Scaled Agile Framework for enterprises

• Develop on Cadence, Release Any Time

• Agile Teams (5-9), work typically in two week scrums/sprints/iterations (timeboxed)• Systems Team: specialized Agile team responsible for maintaining tooling factory and for testing solutions

end-to-end• Pull items from the Program backlog

• 5-10 Agile Teams create an Agile Release Train (ART - 50-125) synchronize their iteration boundaries and deliver integrated, working systems every two weeks in a System Demo

• A Program Increment (PI) cadence is typically 4 iterations, followed by one Innovation and Planning Iteration (IP) which includes a Solution Demo and an Inspect and Adapt session – Big Room Planning

• Release Train Engineer and Value Stream Engineer facilitate ART and Value Stream processes and execution

8


Spotify model

• Scaling skill of existing resources in a T-shape model• Autonomous Squads (8)

• Product owner, scrummaster and T-shaped team

• A collection of Squads aligning to a line of business is a Tribe (<100)

• A Chapter is a horizontal slice across Squads within a Tribe. They have similar skills

• A Guild is an enterprise level Chapter

9


Automation

10


Summary of the Amazon S3 Service Disruption in the Northern Virginia (US-EAST-1) RegionWe’d like to give you some additional information about the service disruption that occurred in the Northern Virginia (US-EAST-1) Region on the morning of February 28th. The Amazon Simple Storage Service (S3) team was debugging an issue causing the S3 billing system to progress more slowly than expected. At 9:37AM PST, an authorized S3 team member using an established playbook executed a command which was intended to remove a small number of servers for one of the S3 subsystems that is used by the S3 billing process. Unfortunately, one of the inputs to the command was entered incorrectly and a larger set of servers was removed than intended. The servers that were inadvertently removed supported two other S3 subsystems. One of these subsystems, the index subsystem, manages the metadata and location information of all S3 objects in the region. This subsystem is necessary to serve all GET, LIST, PUT, and DELETE requests. The second subsystem, the placement subsystem, manages allocation of new storage and requires the index subsystem to be functioning properly to correctly operate. The placement subsystem is used during PUT requests to allocate storage for new objects. Removing a significant portion of the capacity caused each of these systems to require a full restart. While these subsystems were being restarted, S3 was unable to service requests. Other AWS services in the US-EAST-1 Region that rely on S3 for storage, including the S3 console, Amazon Elastic Compute Cloud (EC2) new instance launches, Amazon Elastic Block Store (EBS) volumes (when data was needed from a S3 snapshot), and AWS Lambda were also impacted while the S3 APIs were unavailable.

11


Continuous DeliveryHow do you build better apps, faster?

• Need to deliver apps faster and more

frequently

• Development delays are driving up costs

• Traditional testing requires too much

time and effort

• Inefficient use of resources due to poor

visibility and tracking

KEY CHALLENGES:Build Right:

Accelerate time to market

Invest Right: Link strategy and delivery

Build the Right Things:

Connect constantly to customer

Continuously Improve

Coordinate and collaborate

12

Presenter

Presentation Notes

Deliver high-quality applications quicker with an agile end-to-end continuous delivery solution that automates application development testing and release. Build the right things faster, test the right things automatically and deliver the right things with increased velocity. Build the right things. Connect strategy to delivery so that everyone is aligned, customer feedback is incorporated and the output always meets your business objectives. That way, you can deliver greater innovation, while reducing your SDLC up to 50 percent. Test the right things. Shift testing left and automatically generate test cases and data, to detect up to 90 percent more defects earlier, while reducing your application development time by as much as 50 percent. Deliver the right things. Streamline your end-to-end application delivery and release iteratively to keep on pace with evolving business strategies. As a result, you can accelerate release velocity by as much as 20 times, while reducing production errors by up to 98 percent. Continuous testing solutions: Next-generation, integrated solutions that enable test environment simulation; automatic test case creation, even form requirements; on demand test data management; SaaS-based performance testing; and open source integration. Products CA Agile Requirements Designer enables teams to build test cases from the planning stage as user stories are created and developed. Using their business requirements, teams create the model-based testing plan. The goal is to create the right number of test cases to cover all the scenarios in the application they’re building. CA Service Virtualization creates a virtual environment that can emulate a production environment, allowing teams to test pieces of their application as they’re built. That way, teams can test earlier in the process when production systems like the mainframe or third-party services aren’t available for testing. CA BlazeMeter® is a SaaS-based performance testing tool that can test the scalability of APIs, mobile apps and more by simulating real-world traffic and user conditions. CA Test Data Manager is ideal when actual data is required to see if the application performs as expected; the software can bring a subset of production data into the testing environment or create synthetic data on demand so teams can fully test the performance of their application. CA Continuous Delivery Director ties the process together by automating and orchestrating the release of new code to staging environments once it’s been tested and approved.

13

© 2016 CA. ALL RIGHTS RESERVED. CA CONFIDENTIAL AND PROPRIETARY INFORMATION; FOR INTERNAL USE ONLY. NO UNAUTHORIZED USE, COPYING OR DISTRIBUTION.

Continuous Delivery

Write user stories (requirements)

Right data for the right test environment

Dev Test QA Prod

Continuousintegration (Build-Deploy-Test)

Continuous Delivery WorkflowBuild / deployment / promotion dashboard and reports

Adaptive, dynamic releases Automated & manual testing/test data Deployment workflow, rollback, pre/post tasks

Automated testkick-off, tracking

Testing coverage & progress reporting

Trigger build & deploy in Dev

Runbook

Deployment automation

Release & artifact tracking, environment mgmt, baselining

Applicationknowledge

Link application to user stories

To Do Doing Done

ManageAuthorize

Trigger release deployment

Plan Releases

Plan ReleaseTrains

Promote

Define release workflow, gates& environments

Watch progress (tracing, auditing, reporting)

Create release package with build /deploy

status

Get app definition

Release ManagerProduct OwnerBusiness UserScrum Master

EnterpriseArchitect

Dev

Developers

QA

Test/QADeployment

Manager

Customer

Implement components

Define app: Components & versions

Infra provisioning / environment mgmt / PaaS / containerization / configuration mgmt

AgileCentral

Use app


Integrating continuous testing with a continuous delivery pipeline is key to taking an idea from design to production at speed,

without compromising quality

End-to-End Continuous Delivery Ecosystem

• Test system setup and test data

allocation delays

• Poor quality requirements

• Slow, inefficient test design and

execution

• Unacceptable number of defects

KEY CHALLENGES:

Continuous TestingHow do you build better apps, faster?

Presenter

Presentation Notes

With Continuous Testing solutions, you can accelerate and streamline testing to build better applications faster. Start testing early in the continuous delivery cycle and take your ideas from design to production at speed, without compromising quality. Quickly build the necessary number of test cases. Building most test cases is usually a guessing game. With the CA solution, organizations can eliminate the guesswork by developing test cases that start in the planning stages as user stories are created. Mimic critical third-party or production systems for testing. If code needs to be tested against systems that aren’t available for such purposes, organizations can create a virtualized environment to simulate those unavailable systems and complete testing. Create useful test data. Compliance and other regulations may prohibit the use of actual user data in testing, but CA Technologies solution can help organizations create synthetic data that closely resembles production data for use in testing. Products CA Agile Requirements Designer enables teams to build test cases from the planning stage as user stories are created and developed. Using their business requirements, teams create the model-based testing plan. The goal is to create the right number of test cases to cover all the scenarios in the application they’re building. CA Service Virtualization creates a virtual environment that can emulate a production environment, allowing teams to test pieces of their application as they’re built. That way, teams can test earlier in the process when production systems like the mainframe or third-party services aren’t available for testing. CA BlazeMeter® is a SaaS-based performance testing tool that can test the scalability of APIs, mobile apps and more by simulating real-world traffic and user conditions. CA Test Data Manager is ideal when actual data is required to see if the application performs as expected; the software can bring a subset of production data into the testing environment or create synthetic data on demand so teams can fully test the performance of their application. CA Continuous Delivery Director ties the process together by automating and orchestrating the release of new code to staging environments once it’s been tested and approved.


Security

16


GDPRBy 25 May 2018, any organization that processes personal data of EU citizens needs to be compliant with GDPR. This regulation introduces new data protection requirements that will impact the majority of businesses across all sectors. Organizations that fail to comply with GDPR may face administrative fines up to €20,000,000 or up to 4 percent of global turnover, whichever is higher.

• Rights of data subjects - Object to the use of their data

• Data protection by design and by default - Anonymisation and pseudonymisation

17


• Strict data protection requirements

and heavy penalties

• Expanded definitions of personal

data

• Data use restricted for testing and

pre-production systems; strict

breach reporting requirements

KEY CHALLENGES:Anonymize or create synthetic data for use

in testing

Find, classify and protect sensitive mainframe data

Continuously monitor privileged user accounts

to control access

Monitor and manage compliance across IT

portfolio/projects

Protect data privacyHow do you make security a competitive advantage?

18

Presenter

Presentation Notes

Protect personal data privacy by effectively managing all aspects of the data lifecycle to know exactly what personal data you have, where it resides, who has access, and that it’s used properly across your organization. Find and control regulated mainframe data and classify for compliance. Mainframes are the backbone of many organizations’ business operations, so the data that resides on them must be treated appropriately. Restrict, log and monitor all activity performed by privileged accounts. Without effective privileged access management, many organizations not only fall short in minimizing their risk exposure to breaches and attacks, but they also struggle to meet various regulatory compliance mandates. Drive agility, efficiency and compliance. Combine data subsetting, masking and synthetic, on-demand data generation to enable testing teams and protect sensitive data. Products CA Data Content Discovery finds, classifies and protects, giving you more control of sensitive data that resides on the mainframe to help achieve compliance and reduce risk. Some 70 percent of corporate data resides on mainframes, so getting a handle on where that data is and how to classify it, and then putting processes in place to protect it, is essential. CA Privileged Access Manager helps secure data with a focus on trusted digital identities and breach alerts. Most security breaches involve the use or abuse of privileged credentials. The CA Technologies solution helps organizations continually monitor privileged user accounts, assess risk and detect malicious activity. CA Test Data Manager helps companies comply with data privacy by anonymizing or creating synthetic data for use in testing. CA Project & Portfolio Manager enables a chief risk officer or chief compliance officer to monitor and manage companywide compliance regulations, in addition to the traditional project management office that manages implementation of IT projects. For most organizations, getting into compliance with these various regulations will require a massive project implementing and impacting business systems and processes, as well as the resources and money needed to manage these implementations


Plan and manage compliance changes across business systems, processes,

resources and budget

360

PROJECT

TASKTASK

BUSINESS STAKEHOLDERS

Personal Data

PROTECT PERSONAL DATA

Know exactly what data you have, where it is stored for how long, and ensure that it is used with consent for legitimate purpose; synthetically generate test data more quickly and easily, avoid risk of non-compliant masked test data

Find, classify and protect sensitive mainframe data

Network- and host-based security controls to manage and govern privileged access across the enterprise and hybrid cloud

Protect data privacyHow do you make security a competitive advantage?

19

Presenter

Presentation Notes

Products CA Data Content Discovery finds, classifies and protects, giving you more control of sensitive data that resides on the mainframe to help achieve compliance and reduce risk. Some 70 percent of corporate data resides on mainframes, so getting a handle on where that data is and how to classify it, and then putting processes in place to protect it, is essential. CA Privileged Access Manager helps secure data with a focus on trusted digital identities and breach alerts. Most security breaches involve the use or abuse of privileged credentials. The CA Technologies solution helps organizations continually monitor privileged user accounts, assess risk and detect malicious activity. CA Test Data Manager helps companies comply with data privacy by anonymizing or creating synthetic data for use in testing. CA Project & Portfolio Manager enables a chief risk officer or chief compliance officer to monitor and manage companywide compliance regulations, in addition to the traditional project management office that manages implementation of IT projects. For most organizations, getting into compliance with these various regulations will require a massive project implementing and impacting business systems and processes, as well as the resources and money needed to manage these implementations


Insights

20


Insights• Design for the experience: enhance application development

based on real user insights.• Optimize the customer journey: improve user experience

across web, mobile and wearable apps to deliver a five-star customer experience.

• Improve digital performance: gain insights into performance to determine if the issue is with design, code or infrastructure.

22


Summary

23


ProductConcept

THE MODERN SOFTWARE FACTORYA blueprint for success.

• A modern software factory is agile, built to change and able to adapt to market disruption and customer demand.

• Automation is essential. It saves time, money, and reduces errors, so you can deliver app experiences customers love.

• Insights fuel the factory, you need smart analytics that make the app experiences you deliver better.

• Strong security from the start protects your most valuable assets and builds users trust without getting in the way.

AND DO IT AT SCALE

24

Presenter

Presentation Notes

Agility, Automation, Insights and Security are the critical components of what we call the modern software factory, your blueprint for success. A modern software factory is agile, built to change and adapt to whatever the market throws at you. Agile teams work collaboratively and iteratively to bring new ideas to market, producing the outcomes that matter to customers. Automation is essential, the key to continuously developing, testing and delivering app experiences your customers will love. Automation saves time, money, hassle and reduces errors, so you have more cycles to pursue innovation that creates new value. Insights are the “competitive fuel” that keeps your factory moving in the right direction. Your software can be designed to give you a constant stream of feedback that smart analytics can turn into insights, to make sure the experiences you deliver keep getting better. Strong security is designed into your apps from the beginning, protecting your most valuable assets and building users trust, without getting in the way. A modern software factory excels at all four of these principles, for agility, automation, insights and security at scale—which means that you can consistently deliver the trust, value, speed and reliability that your customers demand. Your modern software factory ensures that your company is ‘built to change,’ and adapt successfully to the increasing turbulence caused by the rapidly accelerating pace of change.

Continuous Delivery - GSE Young Professionals Continious Delivery.pdf · 2020-06-05 · You can...

Documents

Transcript of Continuous Delivery - GSE Young Professionals Continious Delivery.pdf · 2020-06-05 · You can...