Improving Security while Reducing Toil with DevSecOps
summary
Describes converting manual STIG/CIS checklists into automated ansible hardening playbooks and InSpec tests run in CI, integrating with monitoring so alerts include exact remediation steps. Uses BOSH-style immutable infrastructure to repave rotate repair VMs and rotate credentials, cutting a team of four full-time auditors worth of toil and giving near-real-time compliance verification across thousands of servers. Provides concrete commands, tool names and a measured labor savings.
AI-written summary · about
chapters (13)
- 0:00Introduction
- 1:52What is compliance
- 8:51What is DevOps
- 16:39What Pivotal does
- 18:01Bosch
- 20:44Pivotal
- 23:24Culture
- 24:49High performance teams
- 26:39Mapping out your process
- 27:47Infrastructure provisioning
- 32:04Antibullying
- 32:59Inspect Control
- 33:59Compliance
related talks
36mImproving Security while Reducing Toil with DevSecOps
25mTransform Your Security Practices With DevOps
45mDevSecOps : add Security to your DevOps!
31mDevSecOps, or How to Integrate Security into DevOps Practices
32mHow to fit Sec into DevOps without Security team
42mContinuous Security: Integrate security tools into your DevOps Pipeline
40mDevSecOps Guide to Bulletproof Your Development Workflow
31mWhy SecDevOps is the new way in Cybersecurity?