Compliance as code - Seguridad Mania.com - España y América Latina

The classic 'waterfall' approach to the creation of security and compliance procedures is in direct contrast to the fast and agile DevOps approach to application development embraced today. Government agencies and commercial industry have re-staffed to bring themselves into the 21st century: These people understand the value of DevOps development principals, but they've been asked to meld those principles with antiquated waterfall process with gated checkpoints, starts-and-stops, and long development cycles. This session will share lessons learned from the U.S. Defense and Intelligence Community, where Red Hat partnered with the Government to programmatically modernize security and compliance processes. Security is now integral to the system life-cycle, using software-defined baselines to support supporting continuous monitoring of compliance controls.