Using automation to scale security
summary
Volkswagen’s Digital Production Platform (DPP) implements security across ~180 projects, ~1,100 AWS accounts and ~1,600 users by automating enforcement and incident response: a central team grows from 4 to 12, publishes 50 encoded controls, trains ~40 DPP Security Guardian Program members, and runs automated remediation via Lambda+Security Hub that performed ~1,200 fixes in 90 days. Incident playbooks snapshot instances and use SSM to collect evidence within minutes, lifting critical compliance from 96% to 99.99% and halving stale Jira tickets.
AI-written summary · about
chapters (9)
- 0:00Introduction and context
- 1:43Security challenges at scale
- 4:28Security strategy evolution
- 9:01Empowering teams and guardians
- 14:05Automating security controls
- 18:44Automated remediation
- 24:28Automated incident response
- 30:10Building your security journey
- 38:48Summary and takeaways
related talks
24mOne EdTech’s journey to transforming its security practices
23mAn EdTech’s journey to transforming its security practices
25mDevSecOps: Security Automation at Scale
27mStandard Classification: Automate Security, Don't Tell Your Boss
19mSecuring your AWS environment with automated DSPM
20mSecurity Culture & Scaling Your Security Humans
45mSecurity Automation for DevOps at the Scale of Dell: A Real-Life Case Study
54mScaling Security in Agile Scrum