# DevSecOps **Expanded name:** Development, Security, and Operations **Entity class:** Software engineering and delivery method ## Definition **DevSecOps** integrates software development, security, testing, deployment, and operations into continuous automated delivery pipelines. In defense data platforms, it is the delivery mechanism for updating applications and analytic capabilities without treating security review as a single final gate. ## Relationships - **used by:** [[wiki/War Data Platform|War Data Platform]] and [[wiki/Open DAGIR|Open DAGIR]] application ecosystems. - **runs across:** cloud and network environments including [[wiki/Joint Warfighting Cloud Capability|JWCC]] and [[wiki/Department of Defense Information Network|DoDIN]]. - **supports:** rapid, governed deployment of data and AI services. ## Sources / Provenance - [DoD CIO — DevSecOps fundamentals](https://dodcio.defense.gov/Portals/0/Documents/Library/DoDEnterpriseDevSecOpsFundamentals.pdf)