Can you expand on what you mean by "DevOps" culture? Developers doing operational stuff has traditionally not been great and Operations people doing SW develop

Can you expand on what you mean by "DevOps" culture? Developers doing operational stuff has traditionally not been great and Operations people doing SW development is usually less great; for a long time DevOps was the worst of both worlds. That said, CI is great, but CD is not so great and I know a lot of people who refer to it as "Continuously Down" heh. For the most part having QA and/or Automated Testing will improve uptime and security. If you're leveraging standard infrastructure best practices you won't have to worry too much about platform security, if you're not you're going to need some help :)