Darren House – Secure by Design Principles in Cloud-Native DevOps – DevOps Experience 2024
This session is for anyone interested in incorporating Secure by Design principles into their DevOps programs for cloud environments. There will be information for developers/DevOps and infrastructure engineers, security and cloud architects and IT leadership and CISO’s. Attendees will learn how to implement Secure by Design principles effectively, significantly reduce security efforts, lower organizational risk, and ease the burden on DevOps and infrastructure teams.
We take a look at the role of architecture as the primary mechanism to implement Secure by Design principles in organizations that implement DevOps in cloud environments. Explore the natural alignment between application, infrastructure, operations, and security architectures. Compare common cloud technologies with cloud-native serverless alternatives. Describe how cloud-native serverless technologies, when used according to best practices, can significantly reduce the effort required to secure them, lower organizational risk, and alleviate the burden on DevOps and infrastructure teams. Finally, we’ll identify and provide examples of best practices that deliver these benefits.
This session is for anyone interested in incorporating Secure by Design principles into their DevOps programs for cloud environments. There will be information for developers/DevOps and infrastructure engineers, security and cloud architects and IT leadership and CISO’s. Attendees will learn how to implement Secure by Design principles effectively, significantly reduce security effort, lower organizational risk, and ease the burden on DevOps and infrastructure teams.
Key Takeaways:
Before writing any code, align application, infrastructure, operations and security architectures.
Designing apps using cloud-native serverless technologies provides the best balance of flexibility with offloading operational and security tasks, which means fewer fires to fight and more time to dream.
It all starts at the top (of your multi-tiered app). Strategically designing presentation-tier technologies can have a huge impact on reducing organizational risk.
