Investments Unlimited: A Novel About DevOps, Security, Audit Compliance, and Thriving in the Digital Agewriting

governancebusiness-noveldevsecopscompliance
2022-09-13 · 1 min read · Edit on Pyrite

A business novel in the the-phoenix-project tradition, extending DevOps principles into regulated industries. gene-kim leads a large author team drawn from the DevOps Enterprise Forum's work on "Modern Governance."

Context

By 2022, the central DevOps arguments (deploy faster, break down the dev-ops wall, measure with dora-four-key-metrics) were broadly accepted in technology organizations. The remaining resistance came primarily from regulated industries: financial services, healthcare, defense, government. These organizations cited audit requirements, compliance mandates, and security controls as reasons why DevOps practices were incompatible with their constraints.

Investments Unlimited argues the opposite: that DevOps practices (version control, automated testing, deployment pipelines) make compliance and audit more tractable, not less. Automated audit trails are more reliable than manual records; repeatable deployments reduce compliance risk.

Setting and Structure

The novel is set at a fictional investment management firm (IUI Financial) facing a regulatory enforcement action. The protagonist team must transform their software delivery practices to satisfy regulators while also building competitive capability. The business novel structure follows the-phoenix-project pattern: crisis → mentor → transformation → resolution.

Intellectual Contribution

The book originated from john-willis and others' work in the DevOps Enterprise Forum on modern governance frameworks — how compliance, security, and DevOps principles can be integrated rather than treated as opposing forces. The large author team reflects this: multiple practitioners contributed domain expertise.

Limitations

With nine co-authors, the novel is less coherent stylistically than The Phoenix Project or the-unicorn-project. The importance rating (5) reflects its narrower audience (regulated industries) and lesser influence on the broader movement compared to the foundational texts.