Adopting DevOps creates an environment that is inherently more secure because developers use cloud native development tools for their development.

It is the most efficient way to test the security of the application in production since pre-production environments will lack the necessary components to accurately validate the security posture.

Adoption of DevOps practices introduces complications for implementing and auditing standardized security controls, presenting issues such as constantly changing assets and continuous deployment.

By design, DevOps combines the role of developer and operator of an application removing the need for separation of duties which reduces the level of risk