~/talk

Putting Governance Into your DevOps Processes

on YouTube 22m
Talkat ChefConf 2018 · 2018-05-22..05-25· [devops-and-delivery]

speaker

name:Vibhuti Sinha
links:none on file

resources

video:https://youtu.be/JiwvPfJrHuk
slides:none on file

summary

Argues that governance must be built into DevOps pipelines with continuous compliance not periodic audits, shows a live pattern for achieving 100% PCI DSS compliant workloads in containers by combining policy-as-code, role-based access controls, separation-of-duties checks and automated alerts. Demonstrates using Elasticsearch and Apache Spark for real-time visibility and anomaly detection, advocates just-in-time admin and reduced privileged lifetimes, warns automation helps but does not replace governance, and recommends third-party controls and encrypted telemetry for auditability.

AI-written summary · about

chapters (7)

  1. 0:00Introduction governance DevOps
  2. 1:49Compliance challenges in DevOps
  3. 5:51Visibility and security in cloud
  4. 10:11Risk management strategies
  5. 16:38Certification and lifecycle
  6. 20:17Monitoring and automation
  7. 22:00Q&A and conclusion

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.