Bridging Compliance and Innovation: A Guide for DevOps Leaders
summary
Argues that compliance can enable faster innovation by embedding controls into day-to-day DevOps: configures Vanta to track SOC 2 progress and sets milestones (60% by Q2, 80% by Q3) to avoid last-minute audit scrambles; creates security champions whose extra work feeds promotions; adopts sprint mix (default 60/20/20) so security and engineering work always ship; uses static analysis like SonarQube, policy checks with Terraform Sentinel, and monitoring with Datadog; prototypes an AI microservice with Saga pattern and per-service DB and folds security baselines into its repo and tests so launches succeed.
AI-written summary · about
chapters (15)
- 0:00Introduction and agenda
- 1:04Why compliance matters
- 3:55Framing compliance as innovation
- 5:16Building a culture of secure innovation
- 7:01Shared responsibility for security
- 8:24Security champions model
- 9:28Compliance as business as usual
- 10:55Automating compliance workflows
- 12:00Shifting security left
- 13:02Balancing sprint priorities
- 14:26Compliance table stakes
- 15:33Security in delivery pipelines
- 16:57Supporting innovation securely
- 17:59Microservice case study
- 20:48Conclusion and Q&A
related talks
37mCompliance & Regulatory Standards Are NOT Incompatible with Modern Development..
40mDevSecOps Guide to Bulletproof Your Development Workflow
42mSolving for DevOps Auditors with Automated Compliance
27mSecurity Learns to Sprint: DevSecOps
04mThe relationship between DevOps and security
45mDevSecOps : add Security to your DevOps!
39mDevOps: The Return of Security
37mDevOps - The Automation of Compliance