Implementing Compliance Through Automation
Details
Organizations both in the Cloud and on-premises are implementing DevOps best practices to shorten the development life cycle and provide continuous delivery, but can security teams use similar tools to help in their space? They sure can!
Through automation, teams involved in governance can collaborate to provide the security guardrails needed to achieve compliance. With the help of infrastructure as code (IaC), security teams can ensure provisioning of accounts, infrastructure, and permissions is done consistently across their cloud platforms, regardless whether on cloud service provider or private cloud.
This presentation is a case study of how we worked with an enterprise security team to develop a pipeline for account onboarding that implements compliance related guardrails from the beginning; as well as remediate existing compliance findings. The presentation will include a discussion of the approach to the problem, the strategy adopted and a live demo of actual tools.
Speaker: Jason Lutz, Aaron Brock, & Joe Bennet from Contino
Contino is an Enterprise DevOps and Cloud Transformation Consultancy. We specialise in helping highly-regulated enterprises transform faster, modernising their way of working.
Agenda:
- Quick Intros & Announcements (5min)
- Talk (45-60min)
- Q&A (15min)