Keynote: Automating RBI Compliance With Unified Policy-as-Code
summary
Fintech stack processes over 180 billion dollars last year across 5M+ merchants at 99.9% availability, motivating a five-step automated compliance pipeline that converts RBI and PCI/DSS rules into Policy-as-Code. The team applies kivero checks at three layers—proactive in CI (Terraform/OpenTofu), preventive in Kubernetes (pod security, image provenance) and detective runtime/cloud scans—adds immutable evidence with open reports, cuts pre-audit toil from several DevOps staff to one, and plans an AI-driven auditor agent for sampled periodic audits.
AI-written summary · about
chapters (9)
- 0:00RBI compliance challenges
- 1:22Regulatory landscape
- 2:49Manual audit limits
- 3:54Policy-as-code methodology
- 6:03Proactive compliance controls
- 7:30Detective controls and drift
- 8:13Automated auditor agent
- 9:15Gradual enforcement exceptions
- 10:20Policy-as-code future
related talks
21mHyperautomating Compliance and Risk Intelligence in Finance
36mKeynote - Automated Governance
35mImplementing AI RMF with Policy-as-Code Automation
16mRevolutionizing Banking Compliance with AI
34mPCI and Politics
29mAutomating Continuous Compliance for Scalable SaaS Delivery
33mCompliance as Code - Lessons Learned From Regulated Organizations
34mGitOps in a Federated and Regulated Environment at RBI