Tackling the new paradigm of regulatory compliance in the cloud era
summary
Claims a concrete path to continual compliance: Google provides Terraform and Vault in a Google Distributed Cloud marketplace (including an air‑gapped option) so regulated workloads can inherit infrastructure controls instead of rebuilding them. Leidos reports automation cuts provisioning from weeks to days and removes routine labor, reduces drift, and speeds audits. Targeted certifications remain necessary (FedRAMP, IL/IC levels, NIAP asks), and the approach proves out when inheritance plus drift detection delivers auditable evidence at scale.
AI-written summary · about
chapters (8)
- 0:00Introduction to compliance in cloud
- 3:12Regulated environments today
- 7:43Common compliance challenges
- 12:18Automating GRC processes
- 17:11Auditor perspectives on automation
- 20:19HashiCorp’s role in compliance
- 25:24Improving compliance tools
- 29:35Closing and Q&A
related talks
33mCompliance as Code - Lessons Learned From Regulated Organizations
31mA Comprehensive Approach to Cloud Security Posture Management
05mCompliance in the Driver’s Seat Is Your Cloud Car Stuck in the Carpark
49mPublic cloud in regulated industry, not just swipe of a cred
48mWhen DevOps Meets Regulation: Integrating 'Continuous' with 'Government'
01h 09mCloud Safeguarding: View from Cloud Providers
32mCompliance As Code: Shift-Left and Shift-Right Approaches in a Cloud World
29mCloud compliance and assurance