1. COLLINS OKAFOR - Ernst & Young US LLP, Houston, Texas, USA.
2. SURESH VETHACHALAM - Cognizant Technology Solutions, St. Louis, USA.
3. ADE AKINYEMI - KPMG Management Services LP, Canada.
The fast uptake of multi-cloud environments has offered the chances of scalability and resilience, in addition to increasing threats of security management across different platforms. Conventionally, DevOps practices fail to meet demands of dynamic and distributed infrastructures, especially on compliance and data protection. This study develops a DevSecOps framework that can be applied to protect multi-cloud systems by using automated data protection. The model combines security practices by integrating continuous security as part of the CI/CD pipeline enabling the occurrence of risk detection, encryption, and automatic compliance checks and enforcement of the data lifecycle by policy. The framework will provide a smooth implementation of security policies when using heterogeneous cloud providers because it incorporates two concepts: Security as Code and Infrastructure as Code. An example study illustrates that the model improves confidentiality, resilience, and regulatory compliance, and reduces the human error and overhead associated with operations. The results indicate that the suggested DevSecOps-oriented strategy does not only help to curtail emerging cyber threats but also it creates a scalable platform through which businesses can enhance trust, transparency, and operational performance in a multi-cloud environment.
DevSecOps, Multi-Cloud Security, Automated Data Protection, Security as Code, Infrastructure as Code, Compliance, Cloud Resilience.