Continuous Discussions (#c9d9): Episode 29 Recap – Security & Compliance as part of your DevOps Processes
Written by: Electric Bee
1 min read
This morning on #c9d9 we spoke with two industry veterans and published authors - James DeLuccia and Jonathan McAllister - on how to bake-in security and compliance into your DevOps processes, and how DevOps and automation can essentially help you pass your next audit. Our panelists addresses 4 key topics:
- Dev-QA-Sec-Ops: Are we all BFF's now? (or on our way to becoming BFF's?), what does it take to get everyone on board the DevOps train?
- Some concrete examples for how Automation==Auditing, discussing some industry-specific regulations and compliance requirements
- How do you enforce security for both the code,
- and for your environments and configuration
Watch the Replay of this episode:
This episode features:
James DeLuccia IV Technologist, Author, Security Evangelist, Risk Manager, Entreprenuer, and Runner. James is the Author of IT Compliance and Controls: Best Practices for Implementation and How Not To Be Hacked: The Definitive Guide for Regular People @JDeLuccia | pcidss.wordpress.com
Jonathan McAllister Jonathan has been creating automation software since he was a child. Professionally he leverages 10+ years of experience in software development, test, and delivery practices. He is an author, automator and business consultant. @jmcallister80 | www.masteringjenkins.com/
Nikhil Vaze Staff Software Engineer at CloudBees. He is a full stack engineer and loves to hack on things. Nikhil holds a Master of Science in Security Informatics. @therealnikhil | https://electric-cloud.com/blog/author/nvaze/
On the next episode of Continuous Discussions:
Episode 30: Mobile Apps & Your CD Pipeline
Join us on December 1 to discuss how CI and CD are different for mobile apps, and some best practices for getting your awesome app into the App Store faster!
This episode features
Scott Abate A certified Agile project management professional with 20+ years of experience managing software development, complex integrations and services engagements. @ScottAbate | www.propelics.com/blog/
Stay up to date
We'll never share your email address and you can opt out at any time, we promise.