~/talk

Standardization & Security - A Perfect Match

on YouTube 35m
Talkat CloudNativeSecurityCon North America 2023 · 2023-02-01..02-02· [security, open-source]

speakers

name:Ravi Devineni
links:none on file
name:Vinny Carpenter
website:https://vinny.dev/

resources

video:https://youtu.be/ArZYJ1LCCT4
slides:none on file

summary

Northwestern Mutual standardizes a single SCM (migrating from GitHub Enterprise to GitLab) and narrows tool choices to a vetted set, then enforces a centralized pipeline that runs systic container scans, SBOM/bill-of-material checks and xray open-source vulnerability scans. The claim: consolidation cuts maintenance cost, reduces attack surface (supply-chain attacks rose 430%), improves developer fungibility and speeds delivery measurable by DORA metrics, with incentives and an exception process to allow safe innovation.

AI-written summary · about

chapters (15)

  1. 0:00Standardization & security journey
  2. 2:25Paradox of choice
  3. 7:22Tool proliferation causes
  4. 9:50From buffet to set menu
  5. 11:13Golden path for developers
  6. 13:19Enforcement carrots and sticks
  7. 14:25Choice vs developer productivity
  8. 16:09Tool selection criteria
  9. 18:16Case for boring tech
  10. 20:00Tools consolidation strategies
  11. 22:04Standardization vs innovation
  12. 24:31Incentives for innovation
  13. 25:37Centralized governance outcomes
  14. 28:02Lessons learned
  15. 31:30Q&A

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.