Cloud Native GRC
summary
Argument that Policy-as-Code plus machine-readable controls turns GRC from paperwork into continuous automation, backed by a live demo: a CLI called Lula reads OSCAL component mappings, runs OPA policies against a live Kubernetes cluster with Istio to validate mTLS and detect drift, flips a threshold when compliance drops, and restores state. Anecdote: eight full‑time people manually taking login screenshots motivates replacing toil with repeatable evidence collection.
AI-written summary · about
chapters (6)
- 0:00Cloud Native GRC intro
- 7:24What is Cloud Native GRC
- 18:37Live demo: Lula and OSCAL
- 27:30Automating GRC with open source
- 34:12Future of continuous compliance
- 39:30Q&A
related talks
37mPath To Production: Sustainable Compliance In Strict Environments
32mCloud Native Policy as Code: Principles and Best Practices
56mCloud-native Policy Enforcement
22mOSCAL in Action: Real World Examples of Automating Policy & Comp...
33mCompliance as Code - Lessons Learned From Regulated Organizations
31m📗 Rehearsal is Over: Moving GRC Engineering from Theory into Practice ⚖️
32mGRC Engineering - Bringing GRC to a repository near you
41mAvoiding IAC Potholes with Policy + Cloud Controllers