Zero Trust is for Networks, Not Your Teams

A presentation at GOTO Chicago 2023 in May 2023 in Chicago, IL, USA by Matt Stratton

Slide 1

Slide 1

Zero Trust Is For Networks Not Your Teams @mattstratton

Slide 2

Slide 2

What’s the hardest thing about DevOps? @mattstratton

Slide 3

Slide 3

@mattstratton DevOps was aBout BREAKING DOWN SILOS BUT WE MADE NEW ONES @mattstratton

Slide 4

Slide 4

Hi, I’m Matty @mattstratton Punk Music Improv Dogs Aiven

Slide 5

Slide 5

Resilience is a verb @mattstratton

Slide 6

Slide 6

Resilience @mattstratton Rebound Robustness Graceful Extensibility Sustained Adaptability

Slide 7

Slide 7

Rebound Returning to “normal” after a surprise or incident. Work done ahead of time. @mattstratton

Slide 8

Slide 8

Robustness The ability to withstand and absorb well-modeled disturbances “Known knowns” @mattstratton

Slide 9

Slide 9

Graceful Extensibility The ability to stretch with challenges to operational boundaries As opposed to brittleness. @mattstratton

Slide 10

Slide 10

Sustained Adaptability Recognizing and managing adaptive capabilities over long timescales @mattstratton

Slide 11

Slide 11

These are socio-technical systems @mattstratton

Slide 12

Slide 12

BLUNT END / SHARP END Removed from experience Upstream decision makers BLUNT END @mattstratton People directly engaged in the work “Chop wood, carry water” SHARP END

Slide 13

Slide 13

Sharp End Constantly building and destroying systems Strong signaling Improve systems based on strain Will do so naturally if given ownership @mattstratton

Slide 14

Slide 14

Command and Control is a Fallacy @mattstratton

Slide 15

Slide 15

Conway’s Law @mattstratton

Slide 16

Slide 16

let’s flip conway’s law around @mattstratton

Slide 17

Slide 17

@mattstratton Service Design as a metaphor for teams @mattstratton

Slide 18

Slide 18

@mattstratton

Slide 19

Slide 19

“Our analysis found that this culture of psychological safety is predictive of software delivery performance, organizational performance, and productivity” - @mattstratton Accelerate State of DevOps Report

Slide 20

Slide 20

@mattstratton What is PSYCHOLOGICAL SAFETY? @mattstratton

Slide 21

Slide 21

“[Psychological safety is] a sense of confidence that the team will not embarrass, reject, or punish someone for speaking up.” –Amy EdmondsonProfessor, Harvard Business School @mattstratton

Slide 22

Slide 22

@mattstratton Adapted from How Psychological Safety Affects Team Performance

Slide 23

Slide 23

Low psychological safety… ➔ ➔ ➔ ➔ Lack of diversity of EXPERIENCE Unequipped to prevent failure Knowledge silos Indifference and disengagement @mattstratton

Slide 24

Slide 24

@mattstratton We need to have trust WITHIN TEAMS AND ALSO OF TEAMS @mattstratton

Slide 25

Slide 25

Trust within teams @mattstratton

Slide 26

Slide 26

@mattstratton

Slide 27

Slide 27

approach conflict as a collaborator not as an adversary @mattstratton

Slide 28

Slide 28

speak human to human “just like me” @mattstratton

Slide 29

Slide 29

replace blame with curiosity you don’t have all the facts @mattstratton

Slide 30

Slide 30

model vulnerability create emotional bonds @mattstratton

Slide 31

Slide 31

Trust of teams @mattstratton

Slide 32

Slide 32

The Open Organization CONVENTIONAL ORGANIZATION OPEN ORGANIZATION “TOP DOWN” “BOTTOM UP” COMMAND AND CONTROL WHAT TITLE AND RANK HOW HIERARCHY PROMOTION AND PAY WHY @mattstratton SETTING DIRECTION CENTRAL PLANNING MOTIVATING AND INSPIRING GETTING THINGS DONE WHAT CATALYZING INCLUSIVE DECISION-MAKING MERITOCRACY PURPOSE AND PASSION LET THE SPARKS FLY HOW ENGAGEMENT WHY

Slide 33

Slide 33

Siloed for Protection Engineering @mattstratton Operations Prod Mgmt

Slide 34

Slide 34

The Open Organization Bottom-up, Collaborative, Continuous Innovation, Agile @mattstratton

Slide 35

Slide 35

@mattstratton

Slide 36

Slide 36

Be Chris Farley. Not Michael Scott @mattstratton

Slide 37

Slide 37

“Improv is like driving while only looking in the rear view mirror”

  • T. J. Jagodowski @mattstratton

Slide 38

Slide 38

@mattstratton Bring a brick Not a cathedral @mattstratton

Slide 39

Slide 39

Improv for DevOps ➔ ➔ ➔ ➔ Trust in your partner There are no mistakes The team is greater than all of us The fun lies on the other side of “yes” @mattstratton

Slide 40

Slide 40

Players in a scene are the Sharp end @mattstratton

Slide 41

Slide 41

“If we treat each other as if we are all geniuses, poets, and artists, we have a better chance of becoming that on stage” – Del Close @mattstratton

Slide 42

Slide 42

Four things to do right now ➔ Establish rules of engagement ➔ Create space for open communication ➔ Measure consistently for long-term improvement ➔ Provide guardrails (buoys not boundaries) @mattstratton

Slide 43

Slide 43

Thank You! Twitter - @mattstratton Mastodon - @mattstratton@hachyderm.io BLUESKY - @matty.wtf GitHub - mattstratton Slides - speaking.mattstratton.com LinkedIn - linkedin.com/in/mattstratton @mattstratton