Fork me on GitHub
#ask-the-speaker-track-4
<
2020-06-24
>
Jess Meyer - IT Revolution (she/her)10:06:25

After break, welcome speaker @guy to Q&A!

Guy Podjarny10:06:43

πŸ‘‹

πŸ‘‹ 9
Simon Williams10:06:36

"make the task as simple as possible, they do the right thing" πŸ‘

Simon Williams10:06:36

"make the task as simple as possible, they do the right thing" πŸ‘

Guy Podjarny10:06:04

Simple statement, but very true!

Simon Williams10:06:41

Yeah, it's like Nationwide earlier: incentivise rather than instruct (from memory!)

Simon Williams10:06:35

Zach's comment is really important to remember πŸ˜„

Jonathan Evason10:06:08

"Celebrate Success" I think this goes beyond security and into all aspects of our work.

upvotepartyparrot 5
Jonathan Evason10:06:08

"Celebrate Success" I think this goes beyond security and into all aspects of our work.

upvotepartyparrot 5
Guy Podjarny10:06:35

Absolutely, security is just notoriously bad at it. Security is naturally invisible - best case scenario is that nothing happens. So you have to explicitly make an effort to make noise (celebrate) when good things happen.

πŸ‘ 1
Simon Williams10:06:07

πŸ‘ Thanks Guy!

rose g10:06:13

@guy do you think the existence of an infosec team hinders the mindset change needed by devs?

rose g10:06:13

@guy do you think the existence of an infosec team hinders the mindset change needed by devs?

Guy Podjarny10:06:34

No, I don’t think so. I think you need experts to consult, and that infosec teams can do wonders to make it easy for developers to write more secure code. Furthermore, I think it’s important in an organisation that some people have an official, full time job related to security, to ensure it doesn’t get overlooked. Those teams just need to be empowering teams, not dictators.

1
rose g10:06:23

ah there "empowering teams, not dictators"

Andrew Byrne10:06:20

Great talk by Guy. Lots of good stuff to take home and implement.

πŸ’― 2
πŸ‘ 4
Andrew Byrne10:06:20

Great talk by Guy. Lots of good stuff to take home and implement.

πŸ’― 2
πŸ‘ 4
Guy Podjarny10:06:45

Glad you enjoyed it!

Andreas Prins VP Product Strategy Digital.ai10:06:37

thanks @guy, good insights! it is indeed a big pivot. We love to talk about evolutions and revolutions. evolution: cloud and container truly being a new area revolution: all practices and tools and mindset that need to change over time!

πŸ™ 1
Nick Jenkins (Director, Mech Rock DevOps, Perth, Oz)10:06:41

Thanks @guy great talk - security will be the new bottleneck. Love Snyk.

πŸ™ 1
πŸ’ͺ 1
Hannah Beech10:06:25

Fantastic talk @guy! I really found it inspiring, thank you!

πŸ™ 1
πŸ‘ 1
Andreas Prins VP Product Strategy Digital.ai10:06:43

if your following track-4 right now, and you want to get a copy of the periodic table: https://digital.ai/periodic-table-of-devops-tools

πŸŽ‰ 1
πŸ‘ 1
Jonathan Evason10:06:43

thanks @guy got the team taking and thinking of how we can implement better security in our DevOps space.

πŸ‘ 1
Jonathan Evason10:06:43

thanks @guy got the team taking and thinking of how we can implement better security in our DevOps space.

πŸ‘ 1
Guy Podjarny11:06:51

Awesome. You can find some concrete practices we wrote at the DevSecOps Hub https://snyk.io/devsecops too. To be clear, the practices there aren’t Snyk solution related (though clearly Snyk is a great tool to embrace in such a motion)

2
Nick Jenkins (Director, Mech Rock DevOps, Perth, Oz)11:06:05

@guy doesn't look like your slide deck is available on dropbox? any chance?

Nick Jenkins (Director, Mech Rock DevOps, Perth, Oz)11:06:05

@guy doesn't look like your slide deck is available on dropbox? any chance?

Guy Podjarny11:06:16

Wasn’t intentional - maybe I forgot to send it to the DOES team. Will ping them now

Nick Jenkins (Director, Mech Rock DevOps, Perth, Oz)11:06:01

I've got a talk in 2 weeks on sec/dev collaboration and I wanted to reference you if I can.

Guy Podjarny11:06:32

Feel free. Note the podcast with full transcripts can be found on https://www.mydevsecops.io/the-secure-developer-podcast

Molly Coyne (Sponsorship Director, ITREV, she/her)11:06:58

@nick.jenkins Guy's slides are coming! πŸ™‚

Nick Jenkins (Director, Mech Rock DevOps, Perth, Oz)01:06:41

@mollyc still can't see Guy's slides in Dropbox? Pretty please?

Molly Coyne (Sponsorship Director, ITREV, she/her)01:06:01

@nick.jenkins Thanks for the heads up. I circled back with the team and will get you an update ASAP.

Nick Jenkins (Director, Mech Rock DevOps, Perth, Oz)07:06:11

Thanks. I see Guy's in yesterday's now too.

Kristine Setschin - GitLab11:06:49

Amazing, insightful talks and a lot of your views align with what we recently found out in our DevSecOps survey. A big number of developers feel solely responsible for owning the security element. https://bit.ly/2YsLjLc

Andreas Prins VP Product Strategy Digital.ai11:06:55

Finishing the first section question to <!here> : What are the tools you are using to plan and manage transformation? What are the instrument you use to align?

Andreas Prins VP Product Strategy Digital.ai11:06:55

Finishing the first section question to <!here> : What are the tools you are using to plan and manage transformation? What are the instrument you use to align?

Olivier Jacques, DXC11:06:58

β€’ Forcing functions (strong statements) β€’ Value Stream Mappings β€’ Wardley Maps β€’ ... A collection really

Andreas Prins VP Product Strategy Digital.ai11:06:04

Wardley Maps, discovered them only half a year ago, never used them, can you give a few concrete results/benefits it gave? His talks are great, and I’, curious to real life outputs

Harriet Niland11:06:28

Slack is a great way to bring all your people and tools together to align, plan and transform your processes. I'd be interested in what people think?

Andreas Prins VP Product Strategy Digital.ai11:06:38

that is an interesting thought @harriet to stay continuously up to date of what is happening in the space, and have accurate alerts/info coming in. How would you use Slack for planning?

Andreas Prins VP Product Strategy Digital.ai11:06:54

discussing long term strategic goals?

Harriet Niland11:06:22

Absolutely @andreas.prins. Also ad hoc brainstorming or periodically sharing what people are working on to prioritise resources etc I'd be curious to hear any more!

Bogdan Babalau-Maghiar11:06:06

@andreas.prins your presentation is great! the tools you shared are very useful!

πŸ‘ 3
☝️ 1
Andreas Prins VP Product Strategy Digital.ai11:06:06

Thnks @bogdan.babalau-maghia this is the link to the Explorer maps: http://ryxz.nl

1
Matthew Joyner11:06:39

Thanks @andreas.prins !! That was very informative πŸ‘

πŸ‘ 4
πŸ‘ 2
Matthew Joyner11:06:39

Thanks @andreas.prins !! That was very informative πŸ‘

πŸ‘ 4
πŸ‘ 2
Andreas Prins VP Product Strategy Digital.ai11:06:35

thank you! Are you applying any of these techniques?

Matthew Joyner11:06:36

Not quite, but we are at the precipice where we need to start rolling out beyond our own bubble and I think a lot of what you said will help us in being successful to start scaling.

Andreas Prins VP Product Strategy Digital.ai11:06:23

anyone who have question about some of the automation tools under the hood to make this transformation journey happen, please join #xpo-digitalai to see when the demos will happen, or just to ask any question!

πŸ‘ 2
Carmen12:06:33

Hi everyone! I will be here to answer any questions during our session today which is starting soon. Thanks for watching!

6
Jess Meyer - IT Revolution (she/her)12:06:28

Welcome @cdeardo for Q&A!

😎 2
Pete Nuwayser - IBM12:06:38

@cdeardo how have the five flow metrics stood up over time as valuable vital signs? have you uncovered others that may be less impactful but are still relevant?

Jesse Cafarelli12:06:12

Awesome graphs!, how are you tying the buisness value and cost in the upper left corner? Is it related to the other graphs? is all this data manually entered or is there a way to collect this all automatically?

Carmen12:06:47

I think one thing we have seen (and will be discussing) is how the combination of some of these can uncover some of the time thieves that @dominica talks about. For example, Flow Load, Flow Velocity and Flow Time. Also the happiness of the team is a key measure because happy teams are productive and vice versa. Also it's a measure of psychological safety and the ability to experiment to improve flow.

Carmen12:06:30

Yes @jesse.cafarelli we do tie the business value because otherwise flow would be another proxy metric. Improving flow needs to drive generation (and protection) of business value. I mentioned happiness above but value, cost and quality are key here. For now, each team can enter these to track them. Also events (e.g. a process improvement, an experiment) can be noted on the graphs to show the impact of the change.

Carmen12:06:04

Another key is that there are external product teams and internal product teams and sometimes it's not as obvious how to measure value for internal teams. We have had many interesting discussions with folks about this.

Andrew Salt12:06:41

Recommendations on how to deal with situations with conflicting priorities? - not always as easy a just saying no to limit WIP, and then we context switch?

Carmen12:06:18

Yes @andrew.salt that's a common situation as you know. I think one think we coach is to use the metrics to drive the right conversations. As @dominica teaches, saying yes to one thing is saying no to something else. By using the flow metrics and showing some of these details, we hope to have stakeholders understand the impacts of their decisions. We have a phrase of "Stop starting and start finishing". So we try to at least have product owners see the impact of unplanned work and conflicting priorities. Many times risk and debt get neglected which can create challenges down the road.

πŸ‘ 2
Carmen12:06:28

@johan.tegler the light colors represent wait times while the darker component is active times. So it shows how much of the total flow time is spent waiting which can mean that there's a roadblock lurking which is causing work to 'Pile up" like on a freeway before a bottleneck (i.e. construction).

πŸ™ 1
Pete Nuwayser - IBM12:06:29

@cdeardo "how do you deal with this" <-- curious about the specific roles - recalling @nicole.bryan's presentation at DOES London last year about Product Value Stream Lead

Carmen12:06:15

Great question @pnuwayser - we have written about a new role for a "Value Stream Architect" https://thenewstack.io/the-age-of-software-needs-value-stream-architects/

thankyou 2
Carmen12:06:15

Great question @pnuwayser - we have written about a new role for a "Value Stream Architect" https://thenewstack.io/the-age-of-software-needs-value-stream-architects/

thankyou 2
Carmen12:06:25

Many times this role is played by a tech lead, manager, scrum master or combination. There are also 2 levels to this. There is the team itself (e.g. a product team(s)) which is focused on improving their flow) but also a set of folks who can do Systems thinking which harvest results of teams to optimize the entire system (i.e. the First Way).

Nicole12:06:05

We also have (still) found that having a PVS Lead who sets the flow distribution to be incredibly valuable (because this person sees the broader picture of both the business, technology and product vision to understand the best distribution between flow item types)

Nicole12:06:53

the partnership of a VSA with a set of PVS Leads is ideal

πŸ’― 4
2
Pete Nuwayser - IBM12:06:21

Thank you! πŸ‘

Michael Winslow12:06:40

Thanks Great Talk Doctors!

Terry Akkers12:06:01

πŸ‘ good talk!

Carmen12:06:33

Thanks Everyone! I appreciated the questions. Feel free to reach out to me if you have more questions either on slack or at <mailto:carmen.deardo@tasktop.com|carmen.deardo@tasktop.com>

1
thankyou 1