DevSecOps in practice. Tools vs People!
summary
Companies lose about $4 million on average per data breach; one case shows a phishing email nearly siphons $50,000, another mistake publishes cloud keys and spawns 100–200 VMs, costing compute and cleanup. Practical defenses used: SonarQube for static analysis, GitHub dependency graph and dependency scanners for vulnerable packages, image and IaC scanners (tfsec/Checkov), MFA, secrets management (Key Vault/Secrets Manager), CSPM and activity logs, plus staff training and simulated phishing to reduce human risk.
AI-written summary · about
chapters (4)
- 0:00Start
- 1:53Security is everyone's responsibility
- 4:36Phishing attack
- 19:33Integrate Security into Production - Cloud
related talks
44mDevSecOps: Balancing Agility, Security & Stability in a Continuous Software Business
22mDevSecOps - The Story of 3 Security Breaches
25mSecuring Your DevOps Transformation
31mDevOps: You Build It, You Secure It
34mDevSecOps: How to Use DevOps to Make You More Secure
31mDevSecOps, or How to Integrate Security into DevOps Practices
32mHow to fit Sec into DevOps without Security team
30mDevSecOps: How to Level Up IT Security Expertise in Your Organization