Automating Cybersecurity Compliance in DevSecOps with Open Information Model for Security as Code
summary
Claims an open-source system called Cyberismo that stores a plain-text information model (cards, index.json) for “security as code,” provides CLI and a web app, and maps the model to logic for automated checks using Answer Set Programming. It builds project templates, runs query-driven KPIs and policy checks, auto-generates threat models and prevents releases when policy failures or unresolved critical threats exist, and captures evidence for audits; demo shows Draw.io integration and rapid adoption steps, not just theory but a working prototype.
AI-written summary · about
chapters (13)
- 0:00Introduction
- 1:46Cybersecurity compliance challenges
- 5:00Open information model solution
- 8:09Live demo of tool
- 15:57Q&A
- 19:36Health data sharing overview
- 24:40Health data space contracts
- 28:52Patient control with IDS RAM
- 33:13Evaluation of health data spaces
- 42:23Future of data spaces
- 50:41Standardization for data spaces
- 1:05:44Q&A on certification
- 1:08:46Conference wrap-up
related talks
23mSecurity As Code - The New Model Of Achieving Security At Scale
33mAI-Powered Open Source Risk Management: ISO Self-Certification Kit and 5-Level AI Coding Guide
47mAutomating Architectural Risk Analysis with the Open Threat Model format
30mSecuring DevOps using OWASP DevSecOps Tools
36mSecurity Automation In A Devops World
28mImplementing Critical Cybersecurity Controls in a DevOps Environment
40mAutomating Security and Compliance via a new standard-of-standards
20mLife hacks for automating DevSecOps security tasks