Automating Security Compliance in DevSecOps Through AI-Driven Policy Enforcement

This study explores the integration of Artificial Intelligence (AI) in automating security compliance within DevSecOps pipelines. As organizations increasingly embrace DevSecOps to enhance security throughout the software development lifecycle, AI-driven tools are being leveraged to streamline policy enforcement, detect vulnerabilities, and ensure compliance with regulatory requirements. This research employs a descriptive methodology, using a questionnaire to gather insights from 100 professionals in the DevSecOps field. The findings reveal that while AI tools are widely adopted and have shown significant benefits in improving the efficiency of security audits and mitigating security threats, challenges such as a lack of skilled personnel, high implementation costs, and data quality issues persist. The study concludes that AI has the potential to revolutionize security compliance but recommends further investments in training, improved data management, and fostering a culture of AI adoption within organizations to fully unlock its benefits.