How we secure NAV.no and 1/3 of Norway's national budget
summary
NAV’s digital transformation increased services and supply-chain complexity, so they adopt organization-wide security measures across development and operations. The talk covers their use of Security Champions embedded in teams, security practices from planning and design through implementation, and approaches to securing runtime and infrastructure plus proactive prevention and training.
AI-written summary · about
chapters (13)
- 0:00Start
- 13:26Software Supply Chain Attack
- 14:22Working principles
- 25:15Application Principles
- 29:03Zero Trust - Network Policies
- 29:55NAIS Application with Zero Trust
- 30:56Zero Trust - Service Mesh (take III)
- 33:52Authentication and Authorisation
- 35:34To decentralised authorisation
- 37:12NAIS Application with Authentication
- 39:55Challenge: Token reuse
- 41:30Secure access to applications
- 42:02Requirements for solution
related talks
24mSecuring 1/3 of Norway's Annual State Budget
35mSetting the standard: Website security for the Norwegian government
46m360 ° DevSecOps Enterprise Adoption
08mAmbitious S SDLC at Norway's biggest home construction company
41mScaling Welfare With Open Source: How NAV Migrated To Managed OpenSearch
28mSecure code from start; a journey through security training for developers
58mElections: Trust and Critical Infrastructure
23mENSURING SECURITY - THE WAY HOW WE DO IT