Keynote - Automated Governance
summary
Joined Red Hat last year and describes a concrete DevOps automated governance reference: a seven‑stage pipeline of attestations tied to source control and artifact metadata, inspired by Capital One’s 16 gates and Google’s Graficas. The team prototypes objective evidence using digitally signed attestations, Kafka for guaranteed delivery and a Knative model, and policy as YAML -> OPA/Rego. Goal: cut a 30‑day audit to half‑day or continuous; multiple companies prototype and integrate these controls.
AI-written summary · about
chapters (18)
- 0:00Intro
- 0:25Red Hat
- 2:35Books
- 3:34Landscape
- 4:29Survey
- 7:43Cognitive biases
- 9:20Breach Equifax
- 11:01Breach Amazon
- 12:01DevOpsDays Forum
- 12:50DevOps Automated Governance
- 17:06Automated Reference Architecture
- 20:36Policy Working Group
- 21:33Automated Cloud Governance
- 22:55Wrapup
- 24:54How to Utilize Your Network
- 26:54People Who Find Value
- 27:35Audit Efficacy
- 31:45Risk Management
related talks
30mAutomating Governance - Dear Security, Compliance, & Auditors We’re Sorry. Love DevOps
43mDear Security, Compliance, and Auditors, We’re Sorry. Love, DevOps.
07mKeynote: Everything as Code: Declarative Application Delivery with GitOps Workflows- Christian Hernandez, Red Hat
13mKeynote: Setting the Standard - Safely Operationalizing OSS Contributions
22mKeynote Session: Compliance at the Point of Change: Security and Dev..
01h 26mKeynote Presentation Software Defined Security Governance
11mKeynote: Like a Magic Eye Illusion: Seeing the Bigger Picture for Cloud-Native S...
11mKeynote: Automating RBI Compliance With Unified Policy-as-Code