How 2020 Shaped China’s DevOps Standards and Survey Insights

2020 DevOps Standard Progress

In April 2020, the "DevOps Capability Maturity Model Part 6: Security and Risk Management" standard was approved by the China Communications Standards Association (TC1WG5) and entered the filing stage.

In May 2020, the "DevOps Capability Maturity Model Part 8: System and Tool Technical Requirements" standard also passed the same committee and moved to approval.

In July 2020, the International Telecommunication Union (ITU‑T) Study Group 13 approved China’s first international DevOps standard, ITU‑T Y.3525 "Cloud Computing – Requirements for cloud service development and operation management".

2020 China DevOps Survey Report

The China Information and Communications Research Institute, together with cloud‑computing alliances, industry partners, universities and major tech companies, launched the "2020 China DevOps Survey" and collected 1,858 valid questionnaires. The authoritative report was released in August 2020.

The survey showed that DevOps maturity in enterprises is moving toward the comprehensive level, with the proportion of enterprises at that level increasing by nearly 10% compared with 2019. Over 41% of enterprises have adopted DevSecOps, and more than 40% have dedicated security teams with varying maturity levels.

DevOps Maturity Assessment Results

June 19, 2020 – The Institute announced the seventh batch of continuous delivery assessments. Companies such as Agricultural Bank of China (5 projects), China Pacific Credit Card Center, Shanghai Pudong Development Bank, and others passed the Level 3 continuous delivery assessment.

September 25, 2020 – The eighth batch of continuous delivery and the first batch of system‑and‑tool technical requirement assessments were released. Shanghai Saike Mobility, China Mobile Zhejiang, China Telecom System Integration, Ping An Bank, and others passed the first batch of system and tool assessments.

November 27, 2020 – The ninth batch of continuous delivery and the second batch of technical operation assessments were announced. Agricultural Bank of China, China Minsheng Bank passed Level 3 continuous delivery; Guoxin Securities passed Level 2 technical operation.

December 23, 2020 – The tenth batch of continuous delivery, the third batch of technical operation, and the first trial assessment of security and risk management were published. Industrial and Commercial Bank of China, Ping An Bank, and Huatai Securities passed Level 2 security & risk management (DevSecOps). Numerous other enterprises passed Level 3 continuous delivery and Level 2 technical operation.

Enterprises that had passed DevOps standard assessments (as of December 23, 2020):

*The ranking is unordered; the statistics are up to December 23, 2020. Numbers indicate the count of projects/modules that passed each standard level.

Enterprise‑Level DevOps Empowerment Program

In 2020, the enterprise‑level DevOps empowerment (co‑promotion) plan made significant progress, with more than 70 participants from internet, banking, insurance, securities, communications, software, academia, aviation, biotech and other sectors.

On June 23, 2020, the fourth online workshop, jointly organized by the China Information and Communications Research Institute, the Cloud Computing Open Source Industry Alliance and the Open Operations Alliance, focused on DevSecOps. The discussion emphasized that security is a shared responsibility across the IT team throughout the DevOps lifecycle, requiring early involvement of security teams and automated security protection plans.

Looking Ahead

Reflecting on the achievements of 2020, the community looks forward to new opportunities and challenges in the coming years, encouraging continued effort and collaboration.