Source: [LinkedIn](https://www.linkedin.com/pulse/how-iot-applications-deployed-multi-cloud-using-devops-blokdyk/)  
Author: [Gerardus Blokdyk](https://www.linkedin.com/in/gerardblokdijk/)  
Publication date: March 3, 2022
Retrieved from on March 3, 2022

Relevant ISO 27001 clauses/controls:
- [[ISO 27001 C 9.2 Internal audit]]
- [ISO 27001 A 18 Compliance](../../Standards/ISO27x/archive/ISO%2027001%202013/ISO%2027001%20A%2018%20Compliance.md)
- [ISO 27001 A.14.2 Security in development and support processes](../../Standards/ISO27x/archive/ISO%2027001%202013/ISO%2027001%20A.14.2%20Security%20in%20development%20and%20support%20processes.md)

Related:
- [Operational Technology](../../💡Drafts%20and%20Ideas/Operational%20Technology.md)
- [DevSecOps and ISO 27k](../../🎇%20Sparks/DevSecOps%20and%20ISO%2027k.md)

## DevOps IoT: Ask This;


1. How are IoT applications deployed to the multi cloud using the DevOps approach in your organization?

2. Where does DevOps introduce more security threats, or does it have a more risk reducing impact?

3. What managed services does your IoT vendor offer?

4. How does DevOps influence Information System development performance in your organization?

5. Does your service provider have a strong vision for services across the IoT value chain?

6. How much security and data privacy does your system require?

7. How do your testing tools evolve to meet the QA needs for applications built on AI and IoT technologies?

8. Do you frequently check your detailed billing, does your app need all the allocated CPUs and RAM, or will it run on less?

9. How does your test data management fit in with DevOps?

10. To what extent have your developers embraced continuous delivery practices and the DevOps culture to increase the effectiveness of the software development and release process?

11. How does the IoT fit into a your digitalization strategy?

12. Does your IoT platform support data sharing and cross tenancy?

13. Does your IoT platform support open APIs and consistent data structures/models?

14. Are your IoT devices capable of being patched and upgraded?

15. For the primary application or service you work on, how often does your organization deploy code to production or release it to end users?

16. Are edge data centers as a solution solution to IoT and advanced analytics needed?

17. Have you developed a strategy for helping your business unit leaders use cloud services without creating security or compliance risks?

18. How do your IoT devices use AI to enhance security?

19. How do you manage releases so that each release has an acceptable level of risk?

20. What assets do you already have and want to exploit in developing your IoT system?

21. Which standards are used for the design, build and support of your IoT devices?

22. Do your IoT initiatives have c level sponsors beyond the CIO?

23. What level of business threat does your organization face?

24. Does the logical model provide enough components for IoT apps deployment?

25. Does the pipeline provide enough components to enable IoT app deployment on multi cloud?

26. Do you need a DevOps team to manage cloud deployments?

27. Where does your strategy for automation in testing get affected in the case of testing software in a regulated environment?

28. What does IoT do to your brand, your products, your customers, and the way you do business?

29. What IoT deployments have transformed your industry?

30. How much business value does your monitoring solution deliver?

31. How are you protecting the DevOps tool chain and processes, which are being given elevated access privileges that can be easily exploited?

32. What does the Line of Business want from IT?

33. Is sensitive and confidential data being used?

34. How does a customer get help at the right technical level?

35. How does the Internet of Things change the role of your testers?

36. Which tools are being used to monitor the applications deployment?

37. What tools are you using to improve security in your software delivery pipeline?

38. Do your IoT devices expose network based remote management functions as snmp or ssh?

39. Which vendor is primarily in the lead to coordinate your IoT Solution development?

40. How do you create the data or the environments today to test use cases?

41. Where does business analytics contribute to business value?

42. Do you have enough raw data with sufficient detail?

43. Given the stronger data privacy laws, how do your QA practices evolve?

44. How long does it take until a system or user is notified to take corrective actions?

45. What data do you want to collect and how do you want to use this data?

46. Where does the work get done?

47. Does your pipeline provide enough components to support multi cloud deployment?

48. How well encrypted will the data be kept and transmitted?

  

## Organized by Key Themes: ARCHITECTURE, DESIGN, MANAGEMENT, PRODUCT, PROJECT, SECURITY, SYSTEMS, APPLICATIONS, FUTURE, DEVELOP:

  

### ARCHITECTURE:

  

What data drives good decisions?

Be close to each team architecture and code to provide adequate cross system solutions to drive your business goals. 

  

What actually constitutes the setup of an IIoT project?

Make sure the team typically conducts IoT discovery consulting with (internal) customers to lay out the (internal) customer use cases and create overall solution architecture and at the same time, identify what constitutes a POC (Proof of Concept). 

  

How do your testing tools evolve to meet the QA needs for applications built on AI and IoT technologies?

Evaluate package solutions and participate in selection of solutions to meet business needs and architecture standards. 

  

Is requirements engineering research delivering what it promised?

Secure that your operation communicates system architecture to technical and business audiences. 

  

What are the expected roles of manufacturers of IoT devices associated with updates and patches?

Be sure your process is involved in service oriented architecture (SOA) and external integrations. 

  

How many unique users were involved with the authorization process?

Verify that your group is involved in Microservice Architecture pattern implementations. 

  

How many unique users were involved with the authorization process?

Confirm that your organization is involved in large scale application modernization including Kubernetes/container architectures and deployment. 

  

How do you go about delivering complete solutions for your customers?

Interface so that your organization is involved in defining, documenting, and delivering Application Architecture. 

  

Does the pipeline provide enough components to support DevOps?

Act as a trusted advisor partnering with the (internal) customer on its strategy positioning and end to end architecture on multiple domains. 

  

### DESIGN:

  

How do customers get in touch with you for support in the first place?

Make sure your workforce performs Business Process Reengineering (BPR) including assessment of existing business processes (As-Is Assessment), determination of future state (To-Be Assessment and Requirements), BPR gap analysis and assessment, and the general and detailed system design activities needed to support the business systems. 

  

Is there a clear purpose for the EA defined?

Drive your engineering team to utilize teamwork and collaboration skills with product managers, project managers, key stakeholders, architects and UX designers to define requirements, solutions and risk mitigation plans for project delivery. 

  

Can the prospects view application delivery logs on the cloud?

Certify your workforce is involved in gathering detailed business requirements, interpreting (internal) customer business needs, and translating needs into technical design requirements with priority. 

  

Where will you see trends concretely?

Ensure your team monitors architecture and design creation process and reviews the project artifacts. 

  

How satisfied are customers with the solution and the vendor?

Work with key stakeholders, develop product specifications and design criteria, ensure all (internal) customer requirements are satisfied. 

  

What criteria should meet successful solution for data streaming?

Partner with internal application stakeholders, solutions architects, network service managers and market IT leads to define requirements, develop strategy and design network infrastructure and services to meet the needs of the business. 

  

What is the role and responsibility?

Certify your workforce is developing enterprise level applications and custom design integration solutions (SOA) including major enhancements and interfaces, functions, and features. 

  

### MANAGEMENT:

  

How do you audit the data sovereignty at any time?

Encourage collaboration between teams and System and Solution Architects/Engineering Work with Product and Solution Management, Product Owners, and other stakeholders to help ensure strategy and execution alignment Improve the flow of value through value streams by improving and assessing the practices Assists with managing risks and dependencies and addressing critical bottlenecks. 

  

Are stakeholders notified if procedures or instructions change?

Make sure the (internal) customer office manages internal business functions, solution architecture services, security compliance and monitoring capabilities, application-level services, infrastructure capabilities and change management synchronization. 

  

Which factors might offset the cost of offline access in the hybrid application?

Secure that your workforce collaborates with product management and (internal) customer delivery teams to ensure product requirements are clear on what (internal) customers expect and what the delivery teams should set as the right expectations with the (internal) customers. 

  

What aspect of securing IoT concerns you the most?

Assure your design keeps management team apprised of work progress and is proactive in communicating any concerns or opportunities for better project delivery. 

  

Why should organizations implement changes early?

Warrant that your organization is involved in using IT Service Management process and tools for managing incidents, service requests, and configuration changes. 

  

How to track cloud cost changes?

Follow and use IT Service Management process and tools to manage various components of service delivery including incidents, service requests, IT work orders, and configuration changes. 

  

Can reduced trust relationships be exploited?

Apply project management standards ensuring obstacles and risks are identified, tracked and escalated and communicates to team members and PM/Manager/Supervisor promptly. 

  

Where do you start applying DevOps practices in brownfield environments?

Ensure you are able to communicate clearly progress reports, identify critical issues, track them and drive to resolution Able to apply relevant project management methodologies and tools, including Scrum/Agile, to ensure efficiency and quality expectations are met. 

  

How to perform network connectivity test?

Assure your personnel dfss knowledge and involvement or statistical test design and analysis knowledge or critical parameter management. 

  

### PRODUCT:

  

Does the project understand its growth?

Interface with business-oriented leaders from enterprise (internal) customers to communicate product and solution value, understand business pain, and ensure that technical solutions address the (internal) customer business problems. 

  

Does a change break the running software?

Help manage day-to-day operations of multiple work streams for the involvement team Help understand business needs, bridge the gap between involvement, product, and dev team Ensures alignment across disciplines and run sync and retro meetings. 

  

Is there a communication/reporting strategy of the EA model defined?

Find ways of improving services, systems and code and work with the team to define future product features. 

  

How many stages ideally you can have in automated delivery pipeline?

Guide and coach the scrum team on how to use agile practices and principles to deliver quality products and business value. 

  

What data transmit and receive profiles do you require to support your devices?

Make headway so that your organization acts independently or as member of a highly skilled technical team responsible for resolving production support service level impacting issues. 

  

Where and how to start with IoT in your organization?

Review and develop technical product strategy with the CTO and leadership team and define key strategic priorities, objectives, goals, action plans, and measures. 

  

How do you go about delivering complete solutions for your customers?

Work with project managers, on shore/off shore delivery team to deliver product in an Agile, DevOps environment. 

  

Which network resources can be load balanced?

Work with multiple departments across the business to ensure DevOps processes and technologies are integrated into the entire product lifecycle. 

  

Does the conceptual model provide enough components for Cloud?

Warrant that your organization is assisting with the plan/strategy to ensure the team is on track for key deliverables, milestones and content is aligned to product scope/goals. 

  

What face of cloud computing helps to guard against downtime and determines costs?

Confirm that your company communicates the feature or product strategy effectively to key stakeholders and team members. 

  

### PROJECT:

  

How many unique users were involved with the authorization process?

Collaborate with Solution and Enterprise Architects, Business analysts, DBAs and others to understand business requirements Provide suggestions and guidance to different MI/BI projects, based on best practices, optimal solutions, and project standards Lead complex discussions and engagements that may involve multiple project teams from client. 

  

How do improvements improve quality and time to market?

Make sure your staff collaborates with business partners, IS team members, and vendors to support projects and accomplish goals. 

  

How to create a serverless function in cloud?

Oversee that your process is collaborating on and delivering strategy and transformation projects including leading small teams and workstreams, identifying roadblocks, and integrating feedback from (internal) clients and team members. 

  

How many unique users were involved with the authorization process?

Safeguard that your company is involved in project and solution estimation and team structure definition. 

  

How are you governing user access to your overall development environment and ensuring a least privileged posture?

Equip the delivery team to use the methodologies and tools you have determined are best for the project while coaching your team members to develop new skills. 

  

Do you identify as part of a visible or invisible minority in your organization?

Collaborate with the external stakeholders project teams to gather functional and non functional requirements and identify the business requirements. 

  

Do you identify as part of a visible or invisible minority in your organization?

Collaborate with external stakeholders project teams to gather functional and non functional requirements and identify business requirements. 

  

Does your IoT platform support open APIs and consistent data structures/models?

Work with regional leadership team members to support (internal) client project requirements across all services. 

  

How do you recognize an incident?

Gather detailed user requirements, analyze and develop functional and technical specifications, evaluate and develop project cost and benefit estimates, coordinate implementation, create test plans and test scripts, and conduct system and user testing for implementation of application. 

  

How do your testing tools evolve to meet the QA needs for applications built on AI and IoT technologies?

Make sure the developer needs to understand the business and functional requirements of the projects and develop code to meet those requirements. 

  

### SECURITY:

  

How do customers rate the relationship between the price and perceived value of the solution?

Engage with functional teams as both advisor and contributing team member to enable building security into complex systems across the entire product lifecycle (from concept through deployment and use), including conducting security reviews and coordinating penetration testing. 

  

Is implementing the IoT solution financially viable?

Collaborate with business leaders, engineering teams, security teams to gather requirements and translate them into standards with timelines to implement. 

  

Which is the most important client to back up in the cloud?

Create innovative solutions using concepts as infrastructure as code, deployment orchestration, and automation that aligns with security best practices while empowering engineering teams. 

  

Which scalability techniques are you using for stores?

Certify your design tests security solutions using industry standard analysis criteria. 

  

Are your servers/workstations patched for all critical patches?

Guarantee your operation assigns and monitors work of technical personnel, implements quality control and reviews system functionality to ensure delivery predictability, efficiency, security and maintainability. 

  

How is the compliance of the development process assessed?

Work with relevant product managers, product architects, and business managers to champion and help deliver and assess security related initiatives. 

  

Do you need to think about the diversity of who is using your product?

Liaison so that your process provides product security engineering recommendations and resolves integration and testing issues. 

  

How to ensure that each implementation still behaves as specified?

Establish that your process analyzes new IT solutions and IT-related vendor service offerings, identifies potential security threats, develops approaches that can be used to mitigate identified risks, and works with IT to implement recommendations. 

  

How many unique users were involved with the authorization process?

Make headway so that your workforce is involved in windows system administration and windows security policies. 

  

### SYSTEMS:

  

How do your testing tools evolve to meet the QA needs for applications built on AI and IoT technologies?

Be confident that your team projects typically include problem definition, evaluation of requirements, and implementation of systems to meet business and user requirements. 

  

What do you find most frustrating or challenging about automating the network?

Certify your team functions as the primary liaison between end users and technical teams Analyzes requests for new or enhanced systems by reviewing documentation and consulting with end users and technical personnel to assess user needs and to determine the feasibility of automating solutions to user problems. 

  

What is the attitude towards sharing vulnerability information within the software ecosystem?

Oversee that your process is involved in microservice based IoT architecture components including RESTful APIs, gateways, messaging systems and containerization technologies as Docker. 

  

What characterizes networking in large scale distributed projects?

Liaison so that your team is involved in distributed systems, complex user interfaces or other challenging engineering problems. 

  

How many unique users were involved with the authorization process?

Establish that your team is involved in Building Automation systems and the BACnet Protocol. 

  

How many unique users were involved with the authorization process?

Make headway so that your team is involved in RDBMS systems (Specifically PostgreSQL and MySQL). 

  

What should be the overall strategy for the asset to optimize business objectives?

Create and implement successful and innovative solutions based on (internal) clients business requirements that integrate, run, manage, and optimize (internal) clients key business systems. 

  

How are quality requirements distributed in a requirements specification?

Safeguard that your team is involved in highly available distributed systems at scale. 

  

Does each model view follow a clear layout?

Incorporate monitoring of systems and applications to prevent system disruptions and ensure that required Service Level Objectives (SLOs) Agreements (SLAs) are met. 

  

Which cloud concept is related to pooling and sharing of resources?

Make sure your personnel supports business process improvements or systems analysis for missions, systems, and fiscal requirements. 

  

### APPLICATIONS:

  

How much business value does your monitoring solution deliver?

Interact and work with application and business team members to provide the optimal environment for applications to deliver business functionality. 

  

Are there success stories supporting the methodology?

Make headway so that your design is working with key business user in testing, training and supporting business applications. 

  

How many stages ideally you can have in automated delivery pipeline?

Be sure your organization is involved in automated testing of web applications in an agile and continuous delivery environment. 

  

How can the application features be deployed to the multi cloud using DevOps?

Safeguard that your staff is involved in container based applications and DevOps practices using Kubernetes and Docker. 

  

How many unique users were involved with the authorization process?

Make headway so that your organization is involved in modern C applications (CI/CD, instrumentation). 

  

How do you better control costs in software development and sustainment?

Participate in a team oriented environment to develop complex web based applications. 

  

What are the benefits of using DevOps practices in IM?

Certify your staff is responsible for automation of different applications using Agile methodology. 

  

What about the development of test cases?

Invest in the creation and maintenance of your organization requirements and test cases for applications. 

  

Is requirements engineering research delivering what it promised?

Analyze and improve efficiency, scalability and stability of applications while delivering impactful business value. 

  

Which module is used to run a node application on a web browser?

Develop experience working on applications that leverage Service Oriented Architecture (SOA). 

  

### FUTURE:

  

Can the device request confirmation?

Secure that your workforce is involved in defining both business and functional level requirements, user stories/use cases, present state and future state process flows. 

  

How many unique users were involved with the authorization process?

Make sure the Business Consultant have to be involved in the strategic planning of an engagement or helping the (internal) client make decisions about the future IT direction. 

  

Do you intentionally deviate from defined policies?

Assess current state, identify (internal) customer requirements, and define the future state and/or business solution. 

  

What are the most popular types of processors, operating systems, programming languages, and tools?

Liaison so that your group is assessing business capability maturity and defining future state business operating models. 

  

Are the ea model elements clearly named?

Plan the work participate in the Scrum process so you can have good work planned for each sprint and out into the future. 

  

How have service providers taken feedback and incorporated that feedback into offerings?

Warrant that your staff is writing and disseminating after action reports capturing key events, actions taken, and future mitigation plans. 

  

What is the value of achieving the vision?

Enable solutions that realize iterative value while directionally achieving future state vision. 

  

Are the goals of the EA model view clearly defined?

Lead and define the architecturally definition of your organizations future EHR strategic solution. 

  

How do you support the quality requirements engineering across the portfolio lifecycle?

Ensure you adhere to your brand promise to make the complex simple, the future predictable. 

  

### DEVELOP:

  

How do you improve sdo & organizational performance?

Safeguard that your staff works with the team to develop test plans (user story acceptance criteria), accepts each story and potentially features and participates in team demos and retrospectives to validate quality, provide feedback to team and improve team processes. 

  

Are monitoring and observability the same thing?

Be confident that your operation is involved in DevOps concepts Developing monitoring architecture and implementing monitoring agents, system status dashboards. 

  

How many stages ideally you can have in automated delivery pipeline?

Oversee that your organization is working with testers and the DevOps team to define and develop innovative end to end automated testing and deployment solutions. 

  

How do you use AI to achieve a competitive advantage?

Be sure your staff is pricing and Packaging Develop strategies for developing compelling pricing and plan tiers that make sense to (internal) customers and achieve business goals. 

  

How many unique users were involved with the authorization process?

Develop positive relationships with the business and other functions involved in downstream technical solutions and processes. 

  

Does the visualization provide guidance through visual clues that prompt action?

Verify that your workforce develops effective, defect free source code that meets business requirements and standards. 

  

What assets do you already have and want to exploit in developing your IoT system?

Develop your organization architecture strategy based on a situational awareness of various business scenarios and motivations. 

  

How the levels of controller imbalance influence the system performance?

Verify that your process is involved in enterprise account based marketing and developing and executing marketing plans for complex accounts. 

  

Are there success stories supporting the methodology?

Develop close networks with key (internal) customers, CIOs, CTOs developing outcomes based solutions and supporting business results. 

  

How do you make your SIM more secure so that it cannot be misused in another device?

Secure that your strategy develops application architecture and blueprints aimed at reflecting enterprise business logic.
