Life hacks for automating DevSecOps security tasks
summary
Claims a practical way to stop manual InfoSec busywork by using Tugboat Logic to create an InfoSec plan in about five minutes, map frameworks like SOC 2/ISO/GDPR to pre-built frameworks and controls, convert controls into tracked tasks with Jira and GitHub integrations, and run automated evidence collection (about five integrations today) including GitHub pull-request proofs and reusable evidence repositories; auditors can be invited to collaborate and evidence reuse speeds repeat audits, cutting time and manual errors.
AI-written summary · about
chapters (13)
- 0:00Introduction
- 0:21Overview
- 1:00Being a small startup
- 1:41Security due diligence
- 4:08The old way
- 5:17Why dont you have a product
- 5:53Life hacks
- 7:00Tugboat Logic Platform
- 8:09Implement
- 10:34Implement answered security questionnaires
- 12:51Implement evidence tasks
- 15:13Other life hacks
- 16:54Wrap up
related talks
32mHow to fit Sec into DevOps without Security team
30mHandling Security Objections to DevOps
27mDevSecOps: How to Use DevOps to Make You More Secure
45mDevSecOps : add Security to your DevOps!
30mSecuring DevOps using OWASP DevSecOps Tools
36mDevOps Security - Is It Really So Difficult?
46mSecurity DevOps - Staying Secure In Agile Projects
30mAutomating Governance - Dear Security, Compliance, & Auditors We’re Sorry. Love DevOps