DevOps Intelligence: Scaling Governance, Compliance, and Security across an Enterpri...
summary
Fidelity standardizes CI/CD with a reusable Fidelity Pipeline Library and an event-driven evidence store that extracts metadata (git SHAs, build IDs, artifact SHAs) so pipelines push contextual results to a stream (kinesis/sqs/kafka or webhooks/cloud events). The program scales across 15,000 developers and 12 business units, enforces real-time gates (coverage, scans, approvers), reduces pipeline sprawl, preserves immutable artifacts and lineage, and claims no breaking changes since rollout while improving audit readiness and developer experience.
AI-written summary · about
chapters (9)
- 0:00Introduction and context
- 2:05Governance and compliance challenges
- 5:14Fidelity Pipeline Library approach
- 8:51Data extraction and compliance automation
- 12:39Eventing and real-time governance
- 15:04Steel thread lineage across SDLC
- 18:17Standardization and cultural shift
- 22:09Summary and future potential
- 23:12Q&A session
related talks
37mDevOps - The Automation of Compliance
32mFidelity’s Move to “Finance Grade” Kubernetes with GitOps
48mDesigning a Secure Software Development Lifecycle with DevOps
18mLet Devs Be Devs Without Sacrificing Security
01mWhat is DevGovOps?
43mBuilding a Secure DevOps Pipeline
07mCreating A Secure Software Supply Chain In A Large Engineering Organization
21mDevOps in a Highly Regulated Financial Infrastructure Company