Veracode and DevOps.com Research Shows Formal Education Leaves Developers Without Necessary Skills to Succeed in DevSecOps World

76 percent of developers indicated security and secure development education needed for today’s world of coding is missing from formal curriculums

BURLINGTON, Mass. – August 17, 2017 – New research shows that software developers are not receiving the training they need to be successful as DevOps becomes the prevalent approach to building and operating digital products and services. In today’s application-centric economy that gap could have real impact on the productivity of businesses in every industry, as well as on the security and quality of the software that underpins the digital economy. To view the infographic and access to the full research report, visit the Veracode blog.

The 2017 DevSecOps Global Skills Survey, sponsored by Veracode, a leader in securing the world’s software, and acquired by CA Technologies (NASDAQ:CA), and DevOps.com, found that while 65 percent of DevOps professionals believe it is very important to have knowledge of DevOps when entering IT, they’re not receiving the necessary training through formal education to be successful in today’s DevSecOps world (70 percent). DevSecOps refers to the practice of integrating security into the development and testing of software for a “shift left” mentality for faster, better quality outcomes.

The on-demand nature of today’s digital economy has driven the need to focus on innovation and improve the overall workflow of the modern enterprise. Implementing DevSecOps processes, in software development and deployment as a means of fueling this effort, has highlighted the fact that today’s formal education for IT and development professionals has not evolved in the same way, or as quickly, as development has shifted. Those surveyed said that their IT workforce is only somewhat prepared (55 percent) or not prepared (nearly 30 percent) with the skills necessary to securely deliver software at the speed of DevOps. In fact, nearly 40 percent of hiring managers surveyed reported that the hardest employees to find are the all-purpose DevOps gurus with sufficient knowledge about security testing. This poses a significant challenge, as more than 50 percent of organizations said that either the entire organization or some of their teams are currently utilizing DevOps practices.

DevSecOps Adoption Requires Organizations to Minimize the Skills Gap
Although nearly 80 percent of respondents have a bachelor or master’s degree – with 50 percent reporting that they studied and earned degrees in computer science – there is still a lack of cybersecurity knowledge prior to entering the workforce. The survey found that 70 percent of respondents said the security education they received is not adequate for what their current positions require, and that they’re learning their most relevant professional skills on the job (65 percent).

“With major industry breaches further highlighting the need to integrate security into the DevOps process, organizations need to ensure that adequate security training is embedded in their DNA,” said Alan Shimel, editor-in-chief, DevOps.com. “As formal education isn’t keeping up with the need for security, organizations need to fill the gap with increased support for education.”

According to the survey, slightly less than half of respondents said their employers paid for additional training since their entry into the workforce – and nearly seven in 10 developers report that their organizations provide them with inadequate security training. Third-party training, either in the classroom or through e-learning, was identified by one in three surveyed as the most effective way to gain new, relevant skills – but the study confirmed that very few are afforded the opportunity (four percent).

“WannaCry and Petya are just two recent examples of large-scale cyberattacks that further demonstrate the importance of security in today’s exceedingly digital world. Despite this apparent need, security practices and secure software development isn’t required to earn a degree in IT or computer science,” said Maria Loughlin, VP of Engineering, Veracode. “Our research with DevOps.com highlights the fact that there are no clear shortcuts to address the skills gap. Higher education and enterprises need to have a more mature expectation around what colleges should teach and where organizations need to supplement education given the ever-changing nature of programming languages and frameworks. The industry will have to come together to ensure the safety of the application economy.”

Methodology
The study, commissioned by Veracode and conducted by DevOps.com, surveyed nearly 400 DevOps professionals globally. To read more about how DevSecOps builds a bridge between fast and secure software development, download Veracode’s Developer’s Guide to the DevSecOps Galaxy.

About Veracode
Veracode, acquired by CA Technologies, enables the secure development and deployment of the software that powers the application economy.

With its combination of automation, process and speed, Veracode becomes a seamless part of the software lifecycle, eliminating the friction that arises when security is detached from the development and deployment process. As a result, enterprises are able to fully realize the advantages of DevOps environments while ensuring secure code is synonymous with high quality code.

Veracode serves more than fourteen hundred customers worldwide across a wide range of industries. The Veracode Platform has assessed more than 2 trillion lines of code and helped companies fix more than 27 million security flaws.

Learn more at www.veracode.com, on the Veracode blog and on Twitter.

Copyright © 2017 Veracode, Inc. All rights reserved. All other brand names, product names, or trademarks belong to their respective holders.

About MediaOps
MediaOps is the premier global media resource for the emerging technology sector including DevOps, Security and Containerization. Their sites, including DevOps.com and Container Journal attracts and engages a thriving online community of technology professionals around the world. Resources include award-winning editorial from expert journalists, webinars, live events and more. As the leader in these emerging segments, MediaOps can create powerful, integrated marketing and communication platforms for clients.

Follow CA Technologies

Press Contacts

Laura Paine

Veracode
Phone: (339) 674-1535

Megan Grasty

Highwire PR
Phone: (415) 963-4174, x26

Kate Baldwin

Hotwire for Veracode (UK & EMEA)
Phone: +44 (0) 207 608 4677

ABOUT CA TECHNOLOGIES

CA Technologies (NASDAQ:CA) creates software that fuels transformation for companies and enables them to seize the opportunities of the application economy. Software is at the heart of every business in every industry. From planning, to development, to management and security, CA is working with companies worldwide to change the way we live, transact, and communicate – across mobile, private and public cloud, distributed and mainframe environments. Learn more at www.ca.com.

LEGAL NOTICES

Copyright © 2017 CA, Inc. All Rights Reserved. All trademarks, trade names, service marks, and logos referenced herein belong to their respective companies.

Highlight – CA Technologies Blog

The world of enterprise IT is changing, fast. Keep up.

Modern Software Factory Hub

Your source for the tips, tools and insights to power your digital transformation.

Chat
What would you like to chat about?
Contact
Call us at +1-800-225-5224
Call us at +1-800-225-5224
Contact Us