DevSecOps - 4 week Assessment

Sonata's DevSecOps Assessment include: Week 0 • Kick off the program with all key stakeholders • Identify the teams • Get the Interview Slots and Create the Schedule plan

Week 1 -3 • Conduct the Interviews
• Gather Details • Software delivery landscape, SDLC tools and processes • Current DevSecOps practices followed, • Current pain points in IT Delivery • Gather supporting artifacts • Clarification Sessions • Present the findings to the Vertical heads

Week 4: Create the DevSecOps Assessment Report containing • Baseline of the current state • Delivery process as described by the Client stakeholders • Observations on the practices and maturity w.r.t Source Code Management, Continuous integration, Test Automation, and Release Mgmt • Gaps/ obstacles impeding the effectiveness and/or efficiency of an SDLC.
• Overall Assessment of the DevSecOps maturity. • Future Roadmap • A Vision of future desired state of DevOps Maturity • Recommendation of DevOps reference arch for the “to-be” process with necessary tooling and automation • Final Presentation of the Report • A Vision of future desired state of DevOps Maturity which comprises of Recommendation of Azure DevOps reference arch for the “to-be” process with necessary tooling and automation (i.e Azure DevOps ,Azure Security Centre , Containerization and deploying to AKS)

Azure DevOps & GitHub are comprehensive DevSecOps platforms that will fast track your adoption with a low-cost PAYG model. Azure security center, Azure Secure DevOps kit, App Insights, Log Analytics, Azure Policy, Azure Blueprints will automate your operation, monitoring and security. Power BI, Azure API apps will help create personalized Dashboard for C level executives, Program managers, and DevOps teams. Microsoft Teams, Power apps improve convenience for performing day-to-day DevSecOps actions.