DevSecOps in Regulated Industries: Bridging Security and Speed in CI/CD Pipelines

Abstract

The study is focused on how DevSecOps can be effectively applied in CI/CD pipelines in regulated sectors to achieve a balance between security, speed, and compliance. The literature identifies the challenges of automation, compliance alignment, security metrics, and DevSecOps integration in regulated environments. It employs an explanatory study design and qualitative and quantitative secondary data to reveal vulnerabilities and integration challenges. The results indicate that there is an increasing requirement in the automated security testing, standardised CI/CD definitions, and cross-functional collaboration. DevSecOps becomes one of the possible solutions to integrate security into rapid development to maintain compliance and software quality. The study provides actionable recommendations towards safe and effective digitalisation within regulated industries.