Reminder: Get yourself in front of your browser and into #ask-the-speaker-plenary for the opening remarks. We’re kicking off Day 2 in 15 minutes at 10am BST! https://devopsenterprise.slack.com/files/UATE4LJ94/F01D34MC2KS/image.png

Reminder: Day 2 is starting now – opening remarks and then plenary talks! Join the conversation in #ask-the-speaker-plenary.

Reminder: The breakout sessions are starting in 5 minutes. Get in front of your browser and start navigating your way to whichever session you’re attending. https://devopsenterprise.slack.com/files/UATE4LJ94/F01D34MC2KS/image.png

🔆 Honored to introduce @paul.d.fox, Distinguished Engineer, Executive Director Institutional Securities Tech at Morgan Stanley, presenting Log4j Hygiene 🔆

So delighted that you captured this story, @paul.d.fox!!

“what’s do difficult about log4j? why isn’t it as easy as opening tickets for everyone who used it?” 😆

“how many applications? 10s? 100s? 1000s?”

“priority: internet facing: http://morganstanley.com”

That's a very familiar story. We had to contact every single tool/SaaS we used to ask the log4j question. They were also asking us if they banked with us.

(sorry, not sure if I should use 😆 or 😭 emoji.)

“let’s just skip the non-internet facing applications” 😆

Having just started on a new Supply Chain Risk team a couple weeks after log4j dropped, this is like reliving trauma all over again 🤪😅

Our experience of it: Luckily every team had got into the rhythm of patching every month. There was a dashboard that lit up if you were non-compliant. It took 6-9 months to get deployments automated, app testing to test for regression, change process to accept that patching was a low risk change but it put us in a good position. When log4j hit, we got most priority (external) systems patched in a few days, within a month 1000s of apps had been patched, all because we'd been learning how to patch dependancies until it stopped hurting. (@stephen) I don't think we did the deep sweep that @paul.d.fox talked about. All those old containers and apps left in the repos with the vulnerability...

Great session!

Thank you

Excellent session, @paul.d.fox

⚡ We now welcome @eleonravinez and @ml.polo.orbe from Banco de Crédito del Perú and @lguevara of NTT Data, here to present, DevSecOps: Beyond Theory, a Strategy with Real Customer Impact ⚡

Awesome takeaways @paul.d.fox "Focus on the success, not failure" - the risk is important, but not if it means we undermine the mountains of effort already put in by the devs to remediate the issue.

thanks @annp!

I remember!

BCP: Peru’s largest bank! attended 2019 Vegas to learn about DevOps. 🎉

60% of transactions are digital !

NTT: 140K employees;

60 M LOC

(4000 users trained; 60M LOC; totally caught my attention, too, @topo.pal!)

3-6 Months to complete features that needed manual forms and approvals!

I think “to deploy features” b/c of approvals and manual forms. A familiar tale!

“eliminate dependencies”

@lguevara @ml.polo.orbe @eleonravinez - Do you have a central team managing the whole platform?

“reduce implementation; increase frequency of production pushes (?); increase quality”

“highly disruptive change” 🎉 🙂

That looks like a real pipeline, haha

And they kept it running — bad day when the pipeline goes down! 🙂

(@topo.pal Did you know that the Unicorn Project scene of CI servers going down was inspired by @chris552 story from Jaguar Land Rover? 🙂

@eleonravinez what was reaction from the devs of all this new tooling you created? And business users?

That is so cool, @eleonravinez. Wait, 1600 people?!? Wow.

it's not easy to find individuals with these skills anywhere and I love the training to make your own base

2300 community members; co-creation of financial education with their customers. (<<<<<<-----)

"Commitment of C-level is important"

Great session. Thanks @eleonravinez @lguevara@ml.polo.orbe

Thank you, @eleonravinez ! Wow!

Thanks so much!!

Thank you @lguevara!

Thanks @topo.pal and @genek

It has been a very nice experience to share with you the success and learning of BCP & NTT Data

Thank you very much to all!! very happy to share our journey to DevOps!!!!

Reminder: The breakout sessions are starting again in 5 minutes. Get in front of your browser and start navigating your way to whichever session you’re attending. https://devopsenterprise.slack.com/files/UATE4LJ94/F01D34MC2KS/image.png

✨ Introducing @jakob.knutsson657, Head of Cloud & Data Center, Core Engineering, H&M Group, here to present Integrating Business With Tech ✨

All in on the cloud and multi-cloud - see more of that all the time but like the "faster access to innovation" as an objective for that approach, @jakob.knutsson657

🌲 A warm welcome to @miika.soininen, Director, Digital Services and IT, Ponsse Plc and @nsharma, Director of Product Management, Copado, here to present, Automating QA for the King of the Forest 🌲

thank you @jakob.knutsson657

Cool intro video, and fun to see @nsharma and @miika.soininen actually onsite with the forestry equipment. The opposite of work from home

“For the last several years, I’ve been working in test automation. Basically because I like to break things” • @nsharma

“Data is as important as putting fuel [in the] machine” - a forestry machine operator in Canada

reminds me of the Suncor talk. I love the nexus of heavy machinery and DevOps - real world applications

Interesting concept of “cut-to-length” forestry. Only take trees of the size you need. Reduces the waste of excess inventory. Get data on needs from the mill and harvest as needed.

If you thought you had trouble getting a good cellphone signal:

“We accumulated a lot of technical debt … but we learned that it was important to deliver fast before the customer demand dried up”

“You’ve probably had the experience of getting an update that caused your device to not work. … imagine you were a logger sitting in the middle of a forest and suddenly your equipment stopped working” (Brings new seriousness to the challenge of change fail rate)

Thank you, @miika.soininen and @nsharma - what a beautiful presentation!

Thank you for opportunity!

thank you

Reminder: The plenary sessions are starting again in 5 minutes. Start making your way back to your browser and join us in #ask-the-speaker-plenary to interact live with the speakers and other attendees. https://devopsenterprise.slack.com/files/UATE4LJ94/F01D34MC2KS/image.png

Reminder: Please submit your feedback for the talks you attended. It’s so valuable for us and the speakers. And after all, feedback is a gift and sharing is caring! Enter your feedback for those talks here: https://members.itrevolution.com/live/schedule https://devopsenterprise.slack.com/files/UATE4LJ94/F03E48CJRF1/image.png