DevOps - The Automation of Compliance
summary
Claim: automation lets regulated teams release to production daily while preserving auditability. Concrete tooling and practices include branch policies and pull‑request checks, SonarCloud and WhiteSource scans, versioned infrastructure, and Azure Policy and Blueprints that block noncompliant resources. Pipelines create resources, run automated DB migrations, log every release, and enforce four‑eyes reviews and tests. The demos show working pipelines, policy remediation, and dependency scanning that together enable traceable, repeatable compliance in large organizations.
AI-written summary · about
chapters (4)
related talks
29mAutomating Continuous Compliance for Scalable SaaS Delivery
43mDevOps – when doing the right thing hurts!
30mAutomating Governance - Dear Security, Compliance, & Auditors We’re Sorry. Love DevOps
44mDevOps in Regulatory Spaces: It's Only 25% What You Thought It Was…
42mSolving for DevOps Auditors with Automated Compliance
48mDesigning a Secure Software Development Lifecycle with DevOps
38mDevops in an Industrial Company: From Milestones to a Continuous Quality Assurance Approach
01mWhat is DevGovOps?