DOI: 10.4018/IJITSA.2020010104 International Journal of Information Technologies and Systems Approach Volume 13 • Issue 1 • January-June 2020 Copyright © 2020, IGI Global. Copying or distributing in print or electronic forms without written permission of IGI Global is prohibited. 61 Strategy for Performing Critical Projects in a Data Center Using DevSecOps Approach and Risk Management Edgar Oswaldo Diaz, National Institute of Statistics and Geography (INEGI), Aguascalientes, Mexico https://orcid.org/0000-0002-3695-7715 Mirna Muñoz, CIMAT, Guanajuato, Mexico ABSTRACT This article describes the new needs that launched the evolution of the DevSecOps + Risk Management approach as well as a brief description of it. Also, the article presents two cases in which the DevSecOps approach was implemented. The results of implementing the approach showed that the implantation allows: (1) reinforcing the implementation of critical projects in the data center; (2) providing a strategy to automate the processes of critical mission projects in a successfully way; (3) generating added value in the timely delivery of information, with levels of service oriented to the end customer satisfaction; (4) enabling the establishment of adequate service levels to keep operational continuity and; (5) allowing both a quantitative and qualitative analysis of risk. KeywORDS Data Centers, Development Operations Approach, Devop, Informatics Security, Quality Assurance, Risk Management Practices, Software Engineering Practices, Technology Infrastructure 1. INTRODUCTION Data Centers have evolved significantly in recent years and Mexico is not the exception because this country has around 20 percent of the Latin American Data Centers (Judge, 2016). With the creation of Data Centers, a new challenge came up, that is the management of workflows, version control, software products release and risk management while the security is reinforcing and considering people and technology. As an answer to this challenge, Development and Operations (DevOps) approach emerged. In organization such as The National Institute of Statistics and Geography (INEGI by its Spanish acronym) (INEGI, 2018) Data Centers have been implemented as a response to the increasing need of managing critical projects in Mexico. INEGI is a public organism of the government of México. It is in charge of a set of important activities such as: (1) regulating and coordinating the national system of statistical and geographical information; (2) carrying out national censuses; (3) the integration the system of national accounts;