Compliance-As-Code For API Security - session preview
summary
Demonstrates how Compliance-as-Code translates specific ISO 27,0001 controls into executable checks that run in CI/CD pipelines and against third‑party API integrations, with examples of rules expressed as policy files and a working pipeline that fails when a control is missing. Shows mappings from audit requirements to code, tooling used to enforce checks, and how embedding policy as code into infrastructure stops the common pattern of multiple certifications that still get breached.
AI-written summary · about
related talks
05mHow To Automate Compliance If You Aren't Chuck Norris
33mCompliance as Code - Lessons Learned From Regulated Organizations
42mSolving for DevOps Auditors with Automated Compliance
48mTrust Teams but Verify: Compliance as Code Done Right
33mAutomating Industry Regulation (SoX, SoC 2) Enforcement...
24mSecurity Compliance as Code
39mTrust teams but verify: compliance as code done right
22mKeynote Session: Compliance at the Point of Change: Security and Dev..