 The traditional centralised security team model must adopt a federated model allowing each delivery team the ability to factor in the correct security controls into their DevOps practices.IT performance can be measured in terms of throughput and stability.Throughput can be measured by deployment frequency and lead time for changes; stability can be measured by mean time to recover.