Manuscript Title:

A DevSecOps MODEL FOR SECURING MULTI-CLOUD ENVIRONMENTS WITH AUTOMATED DATA PROTECTION

Author:

COLLINS OKAFOR, SURESH VETHACHALAM, ADE AKINYEMI

DOI Number:

DOI:10.5281/zenodo.17034789

Published : 2023-09-23

About the author(s)

1. COLLINS OKAFOR - Ernst & Young US LLP, Houston, Texas, USA.
2. SURESH VETHACHALAM - Cognizant Technology Solutions, St. Louis, USA.
3. ADE AKINYEMI - KPMG Management Services LP, Canada.

Full Text : PDF

Abstract

The fast uptake of multi-cloud environments has offered the chances of scalability and resilience, in addition to increasing threats of security management across different platforms. Conventionally, DevOps practices fail to meet demands of dynamic and distributed infrastructures, especially on compliance and data protection. This study develops a DevSecOps framework that can be applied to protect multi-cloud systems by using automated data protection. The model combines security practices by integrating continuous security as part of the CI/CD pipeline enabling the occurrence of risk detection, encryption, and automatic compliance checks and enforcement of the data lifecycle by policy. The framework will provide a smooth implementation of security policies when using heterogeneous cloud providers because it incorporates two concepts: Security as Code and Infrastructure as Code. An example study illustrates that the model improves confidentiality, resilience, and regulatory compliance, and reduces the human error and overhead associated with operations. The results indicate that the suggested DevSecOps-oriented strategy does not only help to curtail emerging cyber threats but also it creates a scalable platform through which businesses can enhance trust, transparency, and operational performance in a multi-cloud environment.


Keywords

DevSecOps, Multi-Cloud Security, Automated Data Protection, Security as Code, Infrastructure as Code, Compliance, Cloud Resilience.