Northwestern Mutual shifts left & shields right to stay secure on AWS
summary
Northwestern Mutual moves to EKS and a Sysdig CNAPP that enforces scans in pipelines, runs a Sysdig DaemonSet for runtime telemetry and sends events to the SIM, and uses Falco rules and managed policies to detect live threats. The rollout records ~400k–600k scans and stopped 17,000 pipelines with high CVEs, monitors 14,000+ containers across ~30 EKS clusters, uses an admission controller and Renovate for dependency fixes, and plans to tighten SLAs using in-use package detection and Falco rules for real-time response.
AI-written summary · about
chapters (9)
- 0:00Introduction and context
- 2:37Northwestern Mutual overview
- 8:07Security transformation
- 11:22Sysdig platform overview
- 15:32Vulnerability management
- 20:54Admission control and policy
- 24:21Runtime reporting and remediation
- 30:15Threat detection and response
- 35:32Future roadmap and outcomes
related talks
11mKyle Persohn & Sean Corkum, Northwestern Mutual | GitLab Commit 2020
58mHow NatWest uses AWS services to manage vulnerabilities at scale
51mInnovate with AWS and secure with CrowdStrike
35mStandardization & Security - A Perfect Match
56mContinuous innovation in AWS detection and response services
31mNetwork Security at Scale: L3 Through L7 at Splunk
01h 02mSecuring data and democratizing the alert landscape
47mREX QuickSign/Integrating security into a DevOps environment: Mission Impossible?