The Only Reason Security Really Matters for DevOps
summary
Argues that security matters because it protects revenue and vendor trust, citing Amazon doing code deploys every 11.7 seconds, Netflix deploying thousands daily, and Zynga’s games hitting up to 30 billion transactions a day. Shows frameworks overwhelm — 113 BSIMM controls, ISO27017 (121) and CCM (133) — and instead recommends a trimmed NIST-style model: Identify Prevent React. Recommends concrete steps: weekly studio risk profiles, threat‑modeling training, high‑touch pen testing, sharing incident alerts, and embedding security into sales/vendor assessments.
AI-written summary · about
chapters (31)
- 0:00Introduction
- 1:29eBay Security
- 2:30Zynga Security
- 5:06Audience Demographics
- 6:12Agenda
- 6:47Why DevOps
- 7:55DevOps research
- 8:52DevOps adoption
- 11:28The role of security
- 12:18The role of security 10 years ago
- 15:51Why does security matter
- 17:29Vendor cloud ecosystem
- 17:54Tech Beacon article
- 18:14Amazon
- 19:25Netflix
- 19:55Target
- 21:43Walmart
- 22:18Nordstrom
- 24:16Negative Press
- 24:54Compliance
- 26:26Trustworthy Computing
- 27:46Application Security is Born
- 28:40Besom
- 29:36ISO 2703
- 29:56Cloud Security Alliance
- 30:40Security for DevOps
- 32:21Improving Critical Infrastructure Security
- 34:01Five Pillars of Security
- 39:31Identify Bugs
- 43:49Sharing Threat Intelligence
- 45:31Key takeaways
related talks
52mContinuous Security
58mWhy Infosec Needs Rugged DevOps Now: A Study Of High Performing IT Organizations
31mDevOps: You Build It, You Secure It
27mMulti Security Checkpoints on DevOps Platform
30mThe 3 Ways of DevSecOps – Making Shift Happen
30mHandling Security Objections to DevOps
39mDevOps: The Return of Security
47mSecurity is Everybody's Job