DevOps Automated Governance

In the Spring of 2019, several organizations worked together to create a forum paper called DevOps Automated Governance.[1] The paper intended to create a reference architecture around Governance, Risk, and Compliance (GRC) and an automated process while simultaneously building off of some of the successful DevOps software delivery patterns (e,g, CI/CD, Pipelines, Software Supply Chains). All of the organizations working on the paper had already built advanced models of software delivery and were practicing modern DevOps high-performance patterns.[2] As a result, the idea . . .