We're Sorry, Love DevOps
summary
A novella called Investments Unlimited tells a concrete failure: a regulated firm with solid dev and ops still triggers an MRIA because security and compliance were never codified. The claim is that automated governance fixes this by moving from implicit to explicit codification, embedding controls into the SDLC. The practical tool is the DevOps automated governance reference architecture (inputs, outputs, risks, controls, actors, actions) used to design and measure working governance, not just theory.
AI-written summary · about
related talks
43mDear Security, Compliance, and Auditors, We’re Sorry. Love, DevOps.
30mAutomating Governance - Dear Security, Compliance, & Auditors We’re Sorry. Love DevOps
17mDevOps Leadership in practice. True stories
37mDevOps - The Automation of Compliance
48mDesigning a Secure Software Development Lifecycle with DevOps
15mDevOps: Beyond the scope of development and operations
04mThe relationship between DevOps and security
27mThe Operationalism of DevSecOps