~/talk

Solving for DevOps Auditors with Automated Compliance

on YouTube 42m
Talkat RSA Conference 2020 DevSecOps & Application Security · 2020-02-24..02-28· [security, devops-and-delivery]

speakers

name:Shannon Lietz
linkedin:shannonlietz
name:Michelle Nikulshin
links:none on file

resources

video:https://youtu.be/muyP2Hx0R9Q
slides:none on file

summary

Describes using code to express and evaluate security controls within a DevOps pipeline at Intuit, turning controls into testable software artifacts. Explains building automated checks that produce a securability score to help auditors assess compliance as part of the software stack, and discusses integrating those checks into DevSecOps workflows.

AI-written summary · about

chapters (9)

  1. 0:00RSAConference 2020 San Francisco February 24-28 Moscone Center
  2. 15:47The Checklist Approach
  3. 18:10An Opportunity - The Controls Approach
  4. 18:48Controls as Code
  5. 20:19Security Hierarchy of Needs
  6. 22:18Separation of Duties
  7. 29:53Change Management
  8. 32:25Effectiveness Testing
  9. 35:39"Apply" Slide

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.