Investments Unlimited - (Paperback)

About the Book

In the vein of business tales The Phoenix Project and The Unicorn Project, Investments Unlimited brings to life how organizations can rethink the issue of audit, compliance, and security to deliver business value faster, easier, and safer.

Book Synopsis

In the vein of the bestselling The Phoenix Project and The Unicorn Project, Investments Unlimited radically rethinks how organizations can handle the audit, compliance, and security of their software systems--even in highly regulated industries. By introducing concepts, tools, and ideas to reimagine governance, Investments Unlimited catalyzes a more humane way to enable high-velocity software delivery that is inherently more secure.

Investments Unlimited, Inc. has accomplished what many other firms in their industry have failed to do: they have successfully navigated the transition from legacy ways of working to the digital frontier. With the help of DevOps practices, Investments Unlimited delivers value to its customers with speed and agility. But now, all that work is about to fall apart. Sure, DevOps helped the company adapt, but it also failed them.

While features moved through the organization swiftly, their governance process became inundated with friction, frustration, and failure. And now, their inability to deliver what they promise has led regulators to slap them with an MRIA (matter requiring immediate attention), the final warning before cease-and-desist letters and fire sales.

With the future of Investments Unlimited on the line, a cross-functional team of executives and engineers has just months to develop a modern governance process that satisfies regulators but doesn't slow down the company's ability to compete in the market. It is up to this ragtag team to navigate trials, tribulations, site failures, and supply chain attacks, all on their path to save the company from disaster.

Review Quotes

"Finally we have a book that can be leveraged by everyone in your organization involved in meeting security, audit, and compliance requirements. You'll be able to apply this practical guidance immediately, and I really appreciate the inclusion of all of the functions and roles required to be successful. It's a great reminder that we are all in this together!"--Courtney Kissler, SVP, Customer and Retail Technology Starbucks

"Investments Unlimited builds upon years of DevSecOps literature while firmly anchoring the principles into regulated entities like financial services. The technology fable will keep you engaged with relatable stories and conversations, and practical knowledge for you to implement at your own firm and inside your team."--Dr. Brandon R. Williams, VP IAM Strategy, Ping Identity

"There are countless books documenting the techniques and tooling of DevOps. But rather than a technical how-to, Investments Unlimited abstracts much of the nitty-gritty to tell the story of what a DevSecOps transformation might look like for the people and teams of an enterprise organization."--Maya Senen, Sr. SRE

"This book does an amazing job of explaining how good DevOps practices can help ensure that your software if safe, secure, and auditable. I learned a lot from it, which I can't say often after reading DevOps books over the last ten years. This is a must-read for any CISO or executive looking to improve the security and compliance practices in their organization."--Ross Clanton, Chief Architect and Managing Director, American Airlines

"This book helps overcome the fear and frustration many technology organizations have with audit and compliance. The story of Investments Unlimited builds shared understanding across functions and roles in an engaging way and shows us the practical steps to make more speed, stability, and compliance a reality in our own organizations."--Jeff Gallimore, CTIO, Excella

"This book should be required reading for every software product manager and engineer. Learn how to apply security, compliance, audit, and automated testing capabilities in your organization by reading a fictional story that does a great job relating the challenges faced daily."--Thomas Underhill, JD, Director of Trust Engineering Programs, VMware

"Today, software developers are just as much security engineers, whether they know it or not. In a unique and compelling way, Investments Unlimited illustrates how to safely automate security testing, audit, and compliance to help organizations move faster, safer. It's a fast and fun story that sheds light on a much-needed subject: the importance of bringing security, audit, and compliance out of the shadows and into the everyday life of a developer. Security, audit, and compliance are everyone's job every day. Investments Unlimited joyfully brings to light that these essential functions are enabled by DevOps."--Jim Manico, Founder and Secure Coding Educator, Manicode Security

About the Author

Helen Beal is a DevOps and Ways of Working coach, Chief Ambassador at DevOps Institute, and ambassador for the Continuous Delivery Foundation. She is the Chair of the Value Stream Management Consortium and provides strategic advisory services to DevOps industry leaders. She is also an analyst at Techstrong Research, hosts the Day-to-Day DevOps webinar series for BrightTalk and the Value Stream Evolution series on TechStrong TV. She currently lives in the UK.

Bill Bensing builds things that build things. He is a skilled leader and architect of software, people, teams, and companies. Bill is an expert at making innovation a wholly inclusive process. His love of DevOps comes from a background in logistics and operations management. Automated Governance is a topic Bill finds very interesting. He believes a lack of good governance is the single biggest issue preventing breakthrough value. Bill will tell you, "Good strategy and good governance are the grease and guide rails for success." He lives in the Tampa Bay, FL, area.

Jason Cox is a champion of DevOps practices, promoting new technologies and better ways of working. He enjoys helping organizations deliver more value, better, faster, safer and happier. He is an inspirational speaker who loves people and delights in amplifying their abilities with technology. Jason frequently speaks at conferences, contributes to open source and writes on technical and leadership topics. He currently leads several SRE teams and resides in Los Angeles with his wife and their children.

Michael Edenzon is a senior IT leader and engineer that modernizes and disrupts the technical landscape for highly regulated organizations. Michael provides technical design, decisioning, and solutioning across complex verticals and leverages continuous learning practices to drive organizational change. He is a fervent advocate for the developer experience and believes that enablement-focused automation is the key to building compliant software at scale.

Topo Pal is a thought leader, keynote speaker, evangelist in the areas of DevSecOps, Continuous Delivery, Cloud Computing, Open Source Adoption and Digital Transformation. He is a hands-on developer and Open Source contributor. Topo has been leading and contributing to industry initiatives around automated governance in DevOps practices. Topo resides in Richmond, VA, with his wife and two children.

Caleb Queern helps CIOs and CISOs reduce risk across the software development life cycle so they can innovate quickly and win in the market. He lives in Austin, Texas with his wife, Marian, and son, Joseph.

John Rzeszotarski has led organizations with a focus on digital, payments, security, and development. His primary passion is solving complex business and IT problems through technology, fast flow, and building learning organizations. He loves coding new things and driving change in insanely regulated environments. He lives in
Pittsburgh, PA, with his family.

Andres Vega helps engineering organizations securely build large-scale, distributed software leveraging novel approaches to reduce the compliance toil associated with the area. He is recognized in the open-source community as a maintainer, contributor, and technical leader focused on the improvement of ecosystem security. Outside of his profession, he is a family guy and an avid outdoors person. You are sure to find him adventuring with his family all over the trails of the San Francisco Bay Area in his best attempt not to get mauled to death by hungry mountain lions.

John Willis is an author and Senior Director of the Global Transformation Office at Red Hat. John is considered one of the founders of the DevOps movement. He lives in Acworth, GA.