/ Recent content on Tracy Bannon Hugo -- gohugo.io en-us Sun, 27 Apr 2025 00:00:00 +0000 /post/podcasts/singles/template/ Sun, 27 Apr 2025 00:00:00 +0000 /post/podcasts/singles/template/ This session was presented at DevSecOps Days Pittsburgh, held virtually April 27, 2022. /post/talks/appalacia_advance_cyberconfernce_nov2024/ Thu, 07 Nov 2024 00:00:00 +0000 /post/talks/appalacia_advance_cyberconfernce_nov2024/ Technical Learning Session and Panel Appalachia Advance 2024 CyberTech Conference 7Nov2024, 8 AM - 6 PM Training Presentation materials GAI Service Provider Question Sets Article: Cracking the Code: Secure Software Architecture in a Generative AI World /post/talks/addo_ai4sdlc_oct2024/ Wed, 09 Oct 2024 00:00:00 +0000 /post/talks/addo_ai4sdlc_oct2024/ Presentation at ADDO - October 10, 2024 - 330 ET Presentation materials including the AI infused continuum diagram Detailed Bibliography GAI Service Provider Question Sets Generative AI has taken the world by storm, including the realm of software engineering. There’s a rush to incorporate AI tools, from code generation to test analysis. We’ll begin with a high-level overview of AI in the software development lifecycle (SDLC), then dive into the sometimes-tricky world of using Generative AI in software engineering. /post/talks/devopsdays_dallas_ai4sdlc_oct2024/ Sun, 29 Sep 2024 00:00:00 +0000 /post/talks/devopsdays_dallas_ai4sdlc_oct2024/ Keynote Presentation at DevOpsDays Dallas - October 9, 2023 Check back on October 9th for the materials including: + Presentation deck + Detailed Bibliography + Service Provider Question Sets -- Presentation materials including the AI infused continuum diagram Detailed Bibliography GAI Service Provider Question Sets Online Speaker Profile Generative AI has taken the world by storm, including the realm of software engineering. There’s a rush to incorporate AI tools, from code generation to test analysis. /post/2024/2024-02-24-xops_x/ Mon, 24 Jun 2024 00:00:00 +0000 /post/2024/2024-02-24-xops_x/ xOPS: Transdiciplinary approach to incorporating AI into the Software For today, I’m going to define 𝘅𝗢𝗽𝘀 as 𝗗𝗲𝘃𝗦𝗲𝗰𝗢𝗽𝘀 + 𝗗𝗮𝘁𝗮𝗢𝗽𝘀 + 𝗠𝗟𝗢𝗽𝘀. Why though? Because the integration of AI capabilities into our software requires more than traditional DevSecOps. I’ve spent decades architecting software solutions for complex challenges, I’ve learned that pragmatism, integration, and flexibility are paramount. 𝘅𝗢𝗽𝘀 𝗶𝘀𝗻’𝘁 𝗮 𝗺𝗲𝘁𝗵𝗼𝗱𝗼𝗹𝗼𝗴𝘆; it’s a transdisciplinary mindset that integrates the 𝗽𝗿𝗶𝗻𝗰𝗶𝗽𝗹𝗲𝘀 of DevSecOps, DataOps, and MLOps. /post/materials/aienterprise_techstrong_ai4sdlc_may2024/ Thu, 16 May 2024 00:00:00 +0000 /post/materials/aienterprise_techstrong_ai4sdlc_may2024/ Presentation Materials from The Artificially Intelligent Enterprise Virtual Summit May 21, 2024 Check back on May 21st for the materials! Click here to download the presentation materials including full bibliography, AI infused continuum diagram, and AI provider questions. -- Generative AI has taken the world by storm, including the realm of software engineering. There’s a rush to incorporate AI tools, from code generation to test analysis. We’ll begin with a high-level overview of AI in the software development life cycle (SDLC), then dive into the sometimes-tricky world of using Generative AI in software engineering. /post/materials/qconlondon_ai4sdlc_april2024/ Fri, 05 Apr 2024 00:00:00 +0000 /post/materials/qconlondon_ai4sdlc_april2024/ Keynote Presentation Materials from QCon London April 2024 Click here to download the presentation materials including full bibliography, AI infused continuum diagram, and AI provider questions. Online Speaker Profile | Keynote description and speaker background. Generative AI has taken the world by storm, including the realm of software engineering. There’s a rush to incorporate AI tools, from code generation to test analysis. We’ll begin with a high-level overview of AI in the software development life cycle (SDLC), then dive into the sometimes-tricky world of using Generative AI in software engineering. /post/podcasts/series/realtechnologistsseries/ Wed, 21 Feb 2024 00:00:00 +0000 /post/podcasts/series/realtechnologistsseries/ In our world today, technology plays an increasingly significant role in shaping our lives. The way we communicate, work, and even entertain ourselves is being revolutionized by tech. Behind every innovation, there’s a person, a human being with unique experiences, perspectives and challenges. Understanding what shaped their perspective is a real goal. That’s why I created the 𝗥𝗲𝗮𝗹 𝗧𝗲𝗰𝗵𝗻𝗼𝗹𝗼𝗴𝗶𝘀𝘁𝘀 𝗣𝗼𝗱𝗰𝗮𝘀𝘁. Each week I explore the genuine stories and true journeys of folks shaping our digital future. /post/podcasts/singles/journeytothecloud/ Tue, 20 Feb 2024 00:00:00 +0000 /post/podcasts/singles/journeytothecloud/ What does the journey to the cloud like when we are discussing application architecture? I had the pleasure of chatting with Richard Simon from the Cloud Therapists. We discussed the reality of mmigrating to cloud and the 4 stages defined in a chart that Richard has developing for a number of years, based on the familiar R’s of migration and customer interactions. You know the R’s right? Rehost, Replatform, Refactor and Rearchitect…you could add Retire and Redesign… /post/2024/2024-02-04-adrs/ Sun, 04 Feb 2024 00:00:00 +0000 /post/2024/2024-02-04-adrs/ 𝗙𝗼𝗿 𝗵𝗲𝗮𝘃𝗲𝗻’𝘀 𝘀𝗮𝗸𝗲, 𝗪𝗿𝗶𝘁𝗲 𝗜𝘁 𝗗𝗼𝘄𝗻!!! I shared the idea of decision records with a mid-career techie and he was blown away by the value and simplicity. Using Architectural Decision Records (ADRs) to jot down choices just make sense. It doesn’t need to be a full white paper… just a few lines as an .MD file. WHY? So your decisions are defensible and to give anyone in the future a frame of reference. /post/2024/2024-01-07-my_ai_predictions/ Sun, 07 Jan 2024 00:00:00 +0000 /post/2024/2024-01-07-my_ai_predictions/ 𝗠𝘆 𝟮𝟬𝟮𝟰 𝗔𝗜 & 𝗦𝗼𝗳𝘁𝘄𝗮𝗿𝗲 𝗔𝗿𝗰𝗵𝗶𝘁𝗲𝗰𝘁𝘂𝗿𝗲 𝗽𝗿𝗲𝗱𝗶𝗰𝘁𝗶𝗼𝗻𝘀?!?! Hello friends, it’s been a long time…’23 was quite a rollercoaster for me personally and professionally. I am so thankful for the support of my network, my family, and my friends. I am ready for ‘24! The question is, are you tired of hearing about AI yet? I’m personally tired of the deluge of generated blog posts with all the embedded unicode emojis. That said, 2024 will be more exciting, innovative, and possibly dangerous than 2023. /post/2023/2023-09-14-gracehopper_whydidntiknow/ Sun, 24 Sep 2023 00:00:00 +0000 /post/2023/2023-09-14-gracehopper_whydidntiknow/ Discovering Grace Hopper: An Overdue Epiphany in a Multi-Decade Tech We all know who 𝗚𝗿𝗮𝗰𝗲 𝗛𝗼𝗽𝗽𝗲𝗿 is now…and I’m really struggling to figure out why I didn’t know who she was until a few years ago. Consider that I’ve got a few decades under my belt as a software architect and have been part of our evolving technical domain. From the foundational layers of software development to the awesome challenges of complex architectures I’ve found myself immersed in so much cool tech and its adoption. /post/2023/2023-07-30-whyreferencearchitectures/ Sun, 30 Jul 2023 00:00:00 +0000 /post/2023/2023-07-30-whyreferencearchitectures/ 𝗧𝗵𝗶𝘀 𝗿𝗲𝗳𝗲𝗿𝗲𝗻𝗰𝗲 𝗮𝗿𝗰𝗵𝗶𝘁𝗲𝗰𝘁𝘂𝗿𝗲 𝗶𝘀 𝗻𝗼 𝗴𝗼𝗼𝗱! It’s missing the list of technology to use and how to knit them together. I heard this recently and became very aware that I needed to do a bit more mentoring on software architecture and in particular, reference architectures. Here’s the 411: A software reference architecture is a common abstraction or standardization of design that can be reused. Abstraction is the key and it serves as a guide for designing and building software systems in a particular domain. /post/podcasts/series/its505series/ Mon, 24 Jul 2023 00:00:00 +0000 /post/podcasts/series/its505series/ I am proud to be a contrbuting journalist and podcaster for It’s 5:05. This briefing airs daily at 5:05 ET US focused on Open Source and Cybersecurity News. You can check out all my contributions below. Also head over to It’s 505 Updates Website and subscribe! Loading… /post/2023/2023-07-23-lcncneedslovetoo/ Sun, 23 Jul 2023 00:00:00 +0000 /post/2023/2023-07-23-lcncneedslovetoo/ 𝗟𝗼𝘄 𝗖𝗼𝗱𝗲/𝗡𝗼 𝗖𝗼𝗱𝗲 𝗶𝗻 𝘆𝗼𝘂𝗿 𝗲𝗰𝗼𝘀𝘆𝘀𝘁𝗲𝗺? 𝗟𝗲𝘁’𝘀 𝘀𝗵𝗼𝘄 𝘂𝗺 𝘀𝗼𝗺𝗲 𝗹𝗼𝘃𝗲! LC/NC platforms have a place in the enterprise but what is their real value? The platforms differ by audience and degree of extensibility. There are architectural tradeoffs to consider as well as a set of gotchas. 𝗡𝗼 𝗖𝗼𝗱𝗲 𝗽𝗹𝗮𝘁𝗳𝗼𝗿𝗺𝘀 are intended for non-technical users who want to deliver value with the greatest amount of simplicity and ease of use They have limited customization options, but they empower non-technical staff to contribute to development and reduce reliance on specialized developers. /post/podcasts/singles/dabom_2023/ Wed, 19 Jul 2023 00:00:00 +0000 /post/podcasts/singles/dabom_2023/ daBOM with Trac Bannon and DJ Schleen ** DJ Schleen: I’ll never forget the day I met Tracy, although I really think we were actually separated at birth. We were scheduled to be on a podcast together and after introducing ourselves to each other in the call lobby, we began a discussion that most likely would’ve gone on forever at the host, not interrupted us to get the show started. /post/2023/2023-07-09-nobuds/ Sun, 09 Jul 2023 00:00:00 +0000 /post/2023/2023-07-09-nobuds/ 𝗡𝗼 𝗕𝗨𝗗𝘀 𝗮𝗹𝗹𝗼𝘄𝗲𝗱! BUD means Big Upfront Design where every architectural aspect is planned in detail before the first line of code is written. Folks working in tech for more than 15 years are nodding in agreement. Early on I was taught that my role was create the blueprint, build reference samples, then guide teams to “𝗰𝗼𝗱𝗲, 𝗹𝗼𝗮𝗱, 𝗮𝗻𝗱 𝗵𝗶𝘁 𝘁𝗵𝗲 𝗿𝗼𝗮𝗱”. We made sure we could “transition” the finished project to the O&M team. /post/2023/2023-07-02-kazmanhumerto_book/ Sun, 02 Jul 2023 00:00:00 +0000 /post/2023/2023-07-02-kazmanhumerto_book/ 𝗦𝗼𝗳𝘁𝘄𝗮𝗿𝗲 𝗔𝗿𝗰𝗵𝗶𝘁𝗲𝗰𝘁𝘂𝗿𝗲 𝗥𝗢𝗖𝗞𝗦! Those who know me, know that this is squarely where my heart rests. 𝗪𝗲 𝗻𝗲𝗲𝗱 𝗺𝗼𝗿𝗲 𝗮𝗿𝗰𝗵𝗶𝘁𝗲𝗰𝘁𝘀 and we need organizations to understand the importance of architecture! IBM Fellow Grady Booch said “All architecture is design, but not all design is architecture. Architecture represents the set of significant design decisions that shape the form and the function of a system, where significant is measured by cost of change. /post/2023/2023-06-25-atam/ Sun, 25 Jun 2023 00:00:00 +0000 /post/2023/2023-06-25-atam/ 𝗜’𝗺 𝘁𝗿𝘆𝗶𝗻𝗴 𝘁𝗼 𝗴𝗲𝘁 𝗮 𝘀𝗼𝗻𝗴 𝘀𝘁𝘂𝗰𝗸 𝗶𝗻 𝘆𝗼𝘂𝗿 𝗵𝗲𝗮𝗱! Ok, maybe not a song… actually a set of software architecture concepts and principles that drive architectural design decisions. The process and decisions are almost 𝗻𝗲𝘃𝗲𝗿 binary. There is a logical an repeatable way to rationalize decisions: 𝘁𝗿𝗮𝗱𝗲𝗼𝗳𝗳 𝗮𝗻𝗮𝗹𝘆𝘀𝗶𝘀. Here is condensed version (I lean heavily on my SEI training and experience.) Here is condensed version. I lean heavily on my SEI training and experience. /post/2023/2023-06-18-qualityattributes/ Sun, 18 Jun 2023 00:00:00 +0000 /post/2023/2023-06-18-qualityattributes/ Do you know what 𝘀𝗼𝗳𝘁𝘄𝗮𝗿𝗲 𝗾𝘂𝗮𝗹𝗶𝘁𝘆 𝗮𝘁𝘁𝗿𝗶𝗯𝘂𝘁𝗲𝘀 are and more importantly, why they matter? Our online community may benefit from talking about 2 topics: Software quality attributes (SQAs) and architecture trade-off analysis. Since trade-offs depend on attributes let’s dig in here first!. SQAs are overall characteristics of a software solution /ecosystem. These aspects define how software performs, not what it does. They play a crucial role in shaping the software’s behavior and functionality in the context of its interaction with users, other systems, and the environment. /post/2023/2023-06-13-trustequation/ Tue, 13 Jun 2023 00:00:00 +0000 /post/2023/2023-06-13-trustequation/ It’s odd and simultaneously cool to go back and reference your own book. As a software architect and engineer, being part of a compendium like 𝗥𝗲𝗶𝗻𝘃𝗲𝗻𝘁𝗶𝗻𝗴 𝗖𝘆𝗯𝗲𝗿𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 gave me the opportunity to insert DevSecOps principles and align modern software practices. Perhaps more importantly, was being able to overlay with the most important aspect: the humans and how to build trust. Trust is not something you just ask for or earn. Rather you need to exude trustworthiness and others examine that and decide for themselves if they can or will extend trust. /post/2023/2023-06-11-platformengineeringnextdevops/ Sun, 11 Jun 2023 00:00:00 +0000 /post/2023/2023-06-11-platformengineeringnextdevops/ Is “𝗣𝗹𝗮𝘁𝗳𝗼𝗿𝗺 𝗘𝗻𝗴𝗶𝗻𝗲𝗲𝗿𝗶𝗻𝗴 𝗶𝘀 𝘁𝗵𝗲 𝗻𝗲𝘄 𝗗𝗲𝘃𝗢𝗽𝘀”? Not exactly, no. It is another evolutionary technique to drive quality, security, and time to delivery all while improving developer efficiency. I’ve been noodling on how darned similar the intent of Platform Engineering compared to Framework Architecture from 15 + years ago. Quite a bit of my recent work is on defining reference architecture (RA)for digital platforms and am seeing some comparisons folks will appreciate. /post/podcasts/series/ontheroadtodevhopsseries/ Sat, 10 Jun 2023 00:00:00 +0000 /post/podcasts/series/ontheroadtodevhopsseries/ In this video series, Trac Bannon and Bryan Finster belly up to the bar and have an honest dialog about DevOps, Software Engineering, and delivering value. These two spar, disagree, and even invite few guests when they need new punching bags (just kidding). From being a “SADMF” to Culture to debates on the meaning of Autonomy, the content is relevant and unedited. Trac and Bryan even add an occasional guest to spice up the mix! /post/podcasts/singles/does2023_promo/ Mon, 05 Jun 2023 00:00:00 +0000 /post/podcasts/singles/does2023_promo/ How is it that I made the promo video? Must just be great insights. ;-) /post/podcasts/singles/sowhat_generativeai/ Sat, 27 May 2023 00:00:00 +0000 /post/podcasts/singles/sowhat_generativeai/ So What?! Generative AI with Trac Bannon /post/materials/societyofinformationriskanalysis_2023/ Fri, 19 May 2023 00:00:00 +0000 /post/materials/societyofinformationriskanalysis_2023/ Fun Doodle of my Keynote at Society of Information Risk Analysis (SiRAcon 2023) Fireside with Lisa Young /post/podcasts/singles/applyingaitothesdlc_techsrong/ Mon, 24 Apr 2023 00:00:00 +0000 /post/podcasts/singles/applyingaitothesdlc_techsrong/ Applying AI to the SDLC New Ideas and Gotchas Applying AI to the SDLC New Ideas and Gotchas - Tracy Bannon from Techstrong.TV on Vimeo. /post/2023/2023-04-10-tradeoffs-1/ Mon, 10 Apr 2023 00:00:00 +0000 /post/2023/2023-04-10-tradeoffs-1/ #𝗔𝗿𝗰𝗵𝗶𝘁𝗲𝗰𝘁𝘂𝗿𝗮𝗹𝗧𝗿𝗮𝗱𝗲𝗼𝗳𝗳𝗔𝗻𝗮𝗹𝘆𝘀𝗶𝘀 is a crucial step in designing robust systems. It’s all about balancing conflicting requirements & goals. Below is a minified approach. 1️⃣ Identify key qualities: Performance, scalability, security, maintainability, usability, etc. 2️⃣ Prioritize: Rank these qualities based on project & business needs. Remember, there’s no one-size-fits-all solution! 3️⃣ Evaluate design options: Explore architectural patterns & styles that address your priorities. 4️⃣ Analyze tradeoffs: Understand the pros & cons of each option, and how it impacts other aspects of your system. /post/2023/2023-04-09-growingthenextgeneration/ Sun, 09 Apr 2023 00:00:00 +0000 /post/2023/2023-04-09-growingthenextgeneration/ I’m passionate that we grow the next generation of software architects. Brian Chambers and I have been discussing types of skills needed and came across a blog by Matt Shealy. Software architecture a high-demand role that blends engineering and business leadership. 🚀 𝗛𝗮𝗿𝗱 𝘀𝗸𝗶𝗹𝗹𝘀 Diagramming complex architectures (e.g., C4 Modeling, UML, SysML) Deep knowledge of programming languages (Java, JavaScript, Python, Ruby, Rust, Go, C, COBOL) Agile and collaborative software development practices, including DevOps expertise 🚀 𝗦𝗼𝗳𝘁 𝘀𝗸𝗶𝗹𝗹𝘀 /post/fun/designpatterns/ Fri, 07 Apr 2023 00:00:00 +0000 /post/fun/designpatterns/ /post/fun/chuckle_1/ Sat, 01 Apr 2023 00:00:00 +0000 /post/fun/chuckle_1/ /post/2022/2022-11-13-doesopsstillexist/ Sun, 13 Nov 2022 00:00:00 +0000 /post/2022/2022-11-13-doesopsstillexist/ ??? Does Ops still exist ??? This is an honest question. I’ve spent my career knee-deep in software architecture, design, engineering, and delivery. Never once in my adoption of DevOps principles and practices did I think that Ops had gone away OR that Ops had suddenly started to build software products. Y’all probably know my story by now that I am truly Dev married to Ops. My hubby and I started our “Dev + Ops” journey over two decades ago when we both worked for AccuWeather in good ol’ State College PA. /post/2022/2022-11-06-nohobbyists/ Sun, 06 Nov 2022 00:00:00 +0000 /post/2022/2022-11-06-nohobbyists/ When it comes to cybersecurity , we have a talent and knowledge deficit right now. The truth is that organizations have not budgeted or planned for the consistent upskilling need. The pace of technical innovation is ever increasing as is the need to constantly upskill. Often, the most successful and sought after talent spend many many hours on their own to keep pace. Being honest, I have to admit I really love tech! /post/2022/2022-09-02-timetosimplify/ Fri, 02 Sep 2022 00:00:00 +0000 /post/2022/2022-09-02-timetosimplify/ “This is the beginning and the best is yet to come! ” Time to simplify! Time to drink my own champagne. I don’t need someone hosting my website or managing my content. I am committed to providing by guidance as code and using Git to managed my espressions with y’all. Photo by averie woodard /post/talks/saturn2017/ Fri, 02 Sep 2022 00:00:00 +0000 /post/talks/saturn2017/ SATURN 2017 Talk: It Can Be Done! Growing an Architects' Community! /post/talks/buildersandbreakers/ Thu, 28 Jul 2022 00:00:00 +0000 /post/talks/buildersandbreakers/ Builders and Breakers Our best way forward towards cyber secure software is teaching builders to think like breakers and breakers to understand builders. Excellent discussion by Tracy Bannon, Casey Ellis, facilitated by Deb Radcliff /post/podcasts/singles/upstreamlog4j_2022/ Sun, 22 May 2022 00:00:00 +0000 /post/podcasts/singles/upstreamlog4j_2022/ TideLift Upstream Webinar: OSS Supply Chain Security »Click Here to Watch« For years, experts have been telling the government to take stock of the software supply chain by generating software bills of materials and defining standards and policies for use. But it took a few big “oh !@#$%” moments like the SolarWinds and Colonial Pipeline breaches to get the wheels of government really turning around improving software supply chain security. /books/ Sat, 30 Apr 2022 00:00:00 +0000 /books/ Books ya gotta check out!! Revinventing Cybersecurity is the first book of its kind written entirely by folks who gender-identify as women and non-binary. Written by Latha Maripuri, Jasmine Henry, Aubrey Stearn, Carla Sun, Lonye Ford, Dr. Meg Layton, Tracy Bannon, Breanne Boland, Alison Gianotto, Carlota Sage, Lisa Hall, Rin Oliver, Joyous Huggins, Yvie Djieya, Angela Marafino, Coleen Shane, Rachel Harpley, Ashleigh Lee, and Amy Devers. Download for free here /post/podcasts/singles/nohobbyists_sei_2022/ Fri, 22 Apr 2022 00:00:00 +0000 /post/podcasts/singles/nohobbyists_sei_2022/ #NoHobbyists - How to Shift Security Everywhere CyberSecurity has traditionally been regarded as a function of a distinct security group. In reality, security and cyber resilient software is the responsibility of everyone in the organization. There is a well intended call to “shift security left” but no one knows how! Instead, organizations are depending on developers to become cyber-savvy on their own. Attendees will learn about why to not shift left, how to build a new security culture, and tips, tricks, and tools for moving away from security hobbyists to having experienced pros. /post/podcasts/singles/nicoftime/ Thu, 07 Apr 2022 00:00:00 +0000 /post/podcasts/singles/nicoftime/ In the Nic of Time with Tracy Bannon: Why Culture matters!] Why Culture matters so much to succeed in software innovation, how to attract and retain talent, how to train your teams and what is working or NOT working when it comes to the DoD Software Factories! Nic invites Trac to share her experience in her role with MITRE as Senior Principal/ Software Architect & DevOps Advisor. /post/podcasts/series/techstrongwomenseries/ Sat, 02 Apr 2022 00:00:00 +0000 /post/podcasts/series/techstrongwomenseries/ Tracy Bannon and Charlene O’Hanlon co-host this video series on focused on the challenges and successes that have helped shape women’s collective journey in IT and ways to elevate conversations around equity and parity beyond gender norms. Guests range from rising starts to CEOs who are all, as I like to say, totally #Badass View the entire season on Digital Anarchist. Here are the most recent! https://digitalanarchist.com/videos/tech-strong-women Beyond Gender Norms In this inaugural episode of Tech. /post/2022/2022-03-30-cyberops-needs-love-too/ Wed, 30 Mar 2022 00:00:00 +0000 /post/2022/2022-03-30-cyberops-needs-love-too/ Cyber Ops needs love too! We spend much time focused on DEV and often ignoring OPS. I am guilty of this too. I work with the MITRE now; I never realized their emphasis on world class cybersecurity. We work on behalf of the public good. Here are some important Cyber Ops resources: ++ 11 Strategies for CyberSecurity Ops Center - Free download of the 400+ page book OR 20 page summary. /post/2022/2022-03-29-all-that-matters-is-working-code/ Tue, 29 Mar 2022 00:00:00 +0000 /post/2022/2022-03-29-all-that-matters-is-working-code/ The only thing that matters is working code in production! This was a shocking statement by friend and colleague, David Sisk. We worked side by side focused on application architecture and software engineering at Deloitte. David, managed to anger an entire set of senior leaders plus a highly visible methods and tools organization by saying the most important outcome is not documents and decks. Ultimately all that matters is working software. /post/2022/2022-03-devops-misinformation/ Mon, 28 Mar 2022 00:00:00 +0000 /post/2022/2022-03-devops-misinformation/ DevSecOps Misformation is real. Ok, ok, maybe we should say misconceptions? Joan Goodchild wrote a brief blog myth-busting her top 5 DevSecOps fallacies. 1 - DevSecOps Results in Loss of Control - To debunk this myth, leaders need to educate teams on how it works, the value, and share real world experience stories. 2 - You can buy and deploy DevSecOps - I love vendors and marketing folks but… debunking this is another exercise in education and sharing. /post/2022/2022-03-22-cognitiveload/ Tue, 22 Mar 2022 00:00:00 +0000 /post/2022/2022-03-22-cognitiveload/ “Forget monoliths vs. microservices. Cognitive load is what matters.” - Skelton & Pais. I’ve argued for nearly 10 years that Microservice patterns can be overwhelming and when coupled with the explosion in open source, can lead to dramatic cognitive overload. Cognitive load/overload has a very measurable impact on software developers and delivery teams. In researching ways to detect and address this challenge, I came across a very common sense, and thought provoking article. /post/podcasts/singles/federallowcodetrailblazers/ Wed, 23 Feb 2022 00:00:00 +0000 /post/podcasts/singles/federallowcodetrailblazers/ Federal Low Code Trailblazers with Tracy Bannon and others! Join us for this episode of the Federal Low Code Trailblazers Podcast with Bill Bunce, Pegasystems, and Special Guests Tracy Bannon, Senior Principal/ Software Architect & DevOps Advisor, MITRE and Alex Sutherland, Director, Salesforce Architecture, Liberty IT Solutions as they discuss DevOps, DevSecOps, and containerization throughout the Federal Government. See what processes they recommend to build and sustain DevOps practices, and the current status of of DevOps in the Federal IT ecosystem. /post/2022/2022-01-13-burlap-or-tapestry/ Thu, 13 Jan 2022 00:00:00 +0000 /post/2022/2022-01-13-burlap-or-tapestry/ My personal journey has taught me the absolute value in diversity; our many varied paths provide a broad set of experiences transforming the fabric of our creative problem solving from burlap to a rich tapestry. With my mental map in mind, how do you think I responded to this question posed to me a few days ago: “I see your undergraduate degree is a BA, why would I listen to you about anything related to software? /post/podcasts/singles/dataopsisnotdevops_fordb/ Thu, 30 Sep 2021 00:00:00 +0000 /post/podcasts/singles/dataopsisnotdevops_fordb/ DataOps is not DevOps for a database At the DevOps Online Summint, 2021, Tracy Bannon tries to clear up some things about DataOps. In this conversation, she explains why DataOps is not DevOps for a database! In this converastion, Trac talks with Tom Henricksen about the differences and why folks get confused. /post/2022/perserverence-the-irs-and-partnering/ Wed, 29 Sep 2021 00:00:00 +0000 /post/2022/perserverence-the-irs-and-partnering/ #StraightTalk4Gov and sharing of experience stories is a passion for me. I’ve been thinking about the importance of learn fast/fail fast whether yesterday or earlier. We have a responsibility to share the stories that highlight culture building, organizational change, policy bending, and perseverance A few years ago I had the opportunity to collaborate with Aaron Francensconi, Amin Qazi, Rupesh Kumar and others at the IRS on adopting agile principles and growing a DevOps practice. /post/2021/fauxscriptkliddie/ Thu, 03 Jun 2021 00:00:00 +0000 /post/2021/fauxscriptkliddie/ A few weeks ago I dusted off my dog-eared copy of ”The Web Application Hacker’s Handbook” by Studdard and Pinto (Yes,I still prefer printed books though I now spring for a second e-version for when I’m traveling.). I’ve installed the most recent version of Burp Suite community edition and OWASP’s ZAP and decided to freshen up my ethical hacking/cyber-student skills. Of course, I am not probing public sites, but rather, using the ethical learning sites: /post/2021/distributedeverything/ Sun, 09 May 2021 00:00:00 +0000 /post/2021/distributedeverything/ A recent post by George Lawton on venturebeat.com highlighted insights by Gartner’s analysts on pressing trends for operationalizing business value (aka value stream/ mission delivery). The key take away is the need to address composability and “distributed everything.” I’ll add a personal “+1” to that assertion given my observations with my clients and federal sponsors. Growth in composable infrastructure is powered by cloud capabilities. Growth in composability of data and analytics is fueled by a few drivers: the need to harness and make use of the data available th enteprise already has, the need to deal with growing volumes of new data available to the enterprise, and the incorporation of multiple analytics techniques into all facets of software intensive systems. /post/2021/graceandfairegardens/ Fri, 02 Apr 2021 00:00:00 +0000 /post/2021/graceandfairegardens/ As I was thinking through messages to share with my amazing workmates and teams and fighting with the spell checker over how to even spell fairy/faery/fairey, I realized that all of my network, friends and family may find some joy in this post. As I head into the Easter weekend, starting with today, Good Friday, I find myself talking pause to reflect on more than our current world situation, but also on the past 18 months of dramatic change. /post/2021/vsm_and_devops_predictions/ Wed, 10 Feb 2021 00:00:00 +0000 /post/2021/vsm_and_devops_predictions/ VSM and DevOps Predictions 2022 At the DevOps Online Summint, 2021, Tracy Bannon tries to clear up some things about DataOps. In this conversation, she explains why DataOps is not DevOps for a 2021 has been a breakthrough year for value stream management (VSM). From the inaugural State of VSM report and expansion of the Value Stream Management Consortium to the rise of advanced VSM platforms, value stream management continues to grow as an industry. /post/2020/2020-09-28-a-year-of-change/ Mon, 28 Sep 2020 00:00:00 +0000 /post/2020/2020-09-28-a-year-of-change/ Tech Reflections When I started receiving congratulations messages on my work anniversary, it struck me just how fast the last 525,600 minutes have passed. So much has changed, and yet much remains the same. What has changed? After nearly 13 years, I left Deloitte Consulting, LLP to join the MITRE Corporation; I had honestly never thought that I would leave Deloitte. While I miss my friends and colleagues @ Uncle D’s, I’ve gained anew with MITRE. /post/talks/saturn2016/ Mon, 28 Nov 2016 00:00:00 +0000 /post/talks/saturn2016/ The Journey to Hybrid Cloud: Considerations for Architecting Your Enterprise Roadmap Tracy Bannon and collegure Sebnem Tokan discuss considerations for architecting your enterprise roadmap on your journey to cloud adoption. The reality is that we will live in a mix hosting world for a long time blending onprem and cloud into a ubiquitous software ecosystem. Gartner found 2016, the bulk of IT spending would go to cloud acquistion. That means we need to quickly figure out how to quickly plan for and leverage cloud resources. /search/placeholder/ Mon, 01 Jan 0001 00:00:00 +0000 /search/placeholder/ Coming Soon: full site search! /about/ Mon, 01 Jan 0001 00:00:00 +0000 /about/ About Me Tracy “Trac” Bannon /trās/ Mentor, Speaker, Author, Real Technologist, Tech Evangelist, Change Agent, Human-Focused Software Architect, Ambassador, Engineer I am a real technologist, tech evangelist, and passionate architect. My focus is the human side of software architecture. With over 15 years of experience designing, delivering, and continuously improving to deliver value. Some consider me an accomplished software architect, engineer, and DevSecOps advisor having worked across commercial and government clients. /contact/ Mon, 01 Jan 0001 00:00:00 +0000 /contact/ Loading… /505/ Mon, 01 Jan 0001 00:00:00 +0000 /505/ I am proud to be a contrbuting journalist and podcaster for It’s 5:05. This briefing airs daily at 5:05 ET US focused on Open Source and Cybersecurity News. You can check out all my contributions below. Loading… /archive/ Mon, 01 Jan 0001 00:00:00 +0000 /archive/ /realtech/ Mon, 01 Jan 0001 00:00:00 +0000 /realtech/ In our world today, technology plays an increasingly significant role in shaping our lives. The way we communicate, work, and even entertain ourselves is being revolutionized by tech. Behind every innovation, there’s a person, a human being with unique experiences, perspectives and challenges. Understanding what shaped their perspective is a real goal. That’s why I created the Real Technologists Podcast. Each week I explore the genuine stories and true journeys of folks shaping our digital future.