Secure it yourself
summary
ABN AMRO embeds security into DevOps by requiring mandatory security spikes for engineers, running a Confluence playbook that links tasks to Jira, and staffing a 30-person center of expertise that advises on designs and configs. A company-wide movement called Green Light adds voluntary security champions, practical patterns like SSH hardening and NIST assurance guidelines, and a Microsoft Teams digital walk-ins channel for quick Q&A. Early measurable wins include uptake of spikes and positive engagement from the playful security Oscars awards.
AI-written summary · about
chapters (11)
- 0:00Introduction
- 5:05Capabilities
- 6:43Security spikes
- 8:16Greenlight
- 16:24QA
- 16:59Training topics
- 17:41Training approach
- 19:12Importance of security
- 20:08Question
- 20:47Success
- 21:09Wrapup
related talks
21mSecuring a Security Company
20mBuilding security culture on infrastructure teams
24mBeing secure by design: Engineer-led security
47mSecurity is Everybody's Job
24mConcrete Steps to Create a Security Culture
54mScaling Security in Agile Scrum
27mIncluding security in your engineering culture
42mContinuous Security: Integrate security tools into your DevOps Pipeline