Adaptive Assurance: Implementing an Automated Control Testing Program
summary
Covers a concrete case study of automating cyber control testing at Delta Dental, showing how to build test logic and metrics, evaluate data-source maturity, create visualizations, and design an automation stack to scale assurance for privacy and data protection requirements.
AI-written summary · about
chapters (13)
- 0:00Intro
- 2:09The Importance of Trust
- 5:03Effort Effectiveness
- 7:40Creating an Automated Control Testing Program
- 9:27Improving Effectiveness
- 11:31Prioritize - Identify Requirements
- 13:23Prioritize - Decompose Requirements
- 14:14Define - Controls & Effectiveness Metrics
- 17:13Validate - Inspect Data & Fill Gaps
- 20:18Implement - Construct Solution Stack
- 31:39Report - Drive Action
- 36:38Quick Start Guide to Automated Control Testing
- 39:37Apply What You Have Learned Today
related talks
22mRethinking Risk, Governance, and Compliance Applying Automation
40mCybersecurity Controls: It Isn't Just Technical Controls That Need Testing
22mTest Automation and Beyond: Implementing Continuous Testing Effectively
31mConstructive Assurance Cases for Cybersecurity
40mSecurity Automation in the agile SDLC - Real World Cases
40mDesign Approaches for Security Automation
05mHow To Automate Compliance If You Aren't Chuck Norris
32mIntroduction to CDD and Security Centric System Design