Adventures in Agile Auditing: Don’t Just Survive Your Audit… Thrive in it!
summary
Nationwide builds an agile audit engagement model that embeds auditors into product team rhythms and applies Scrum and DevOps practices to Identity and Access Management controls, specifically tackling separation of duties and change approvals. The team reworks IAM as a product supporting ~28,000 associates, runs iterative reviews tied to sprint cadences, and converts findings into prioritized, trackable work so audits become collaborative verification with faster remediation rather than adversarial point-in-time inspections.
AI-written summary · about
related talks
01h 10mAuditors' Workshop: What You’ve Wanted to Ask an Auditor, but Were Afraid To Ask
32mCompliance and Audit Readiness: The DevOps Killer?
13mAgile in Security and Security in Agile
29mPanel Discussion: Ask an Auditor Anything: DevOps Compliance
57mAgile Application Security
50mCase Study: 10 Steps to Agile Development without Compromising Enterprise Security
46mApplication Security in an Agile World
50mTraffic safety: Auditing and enforcing IAM best practices