December 27, 2019

206 words 1 min read

Compliance-driven infrastructure

Compliance-driven infrastructure

DevOps and test-driven infrastructure radically shifted the way we develop and deploy applications and infrastructure. Compliance-driven infrastructure builds on the same foundation, incorporating compliance and security into the mix. Christoph Hartmann and Dominik Richter explore InSpec and explain how it enables you to easily incorporate compliance and security in your development workflow.
Talk Title Compliance-driven infrastructure
Speakers
Conference O’Reilly Software Architecture Conference
Conf Tag Engineering the Future of Software
Location San Francisco, California
Date November 14-16, 2016
URL Talk Page
Slides Talk Slides
Video

Compliance-driven infrastructure is an approach to developing infrastructure that combines a configuration management framework with test-driven development (TDD) and industry compliance regulations like CIS benchmarks. DevOps—a game-changing paradigm that enables teams to work in a lean and cost-effective way and focuses on improving the way we implement and deploy IT systems and how we work together—paved the way for a radical shift in infrastructure management. Despite all these advancements, ensuring quality and compliance and meeting industry regulations like PCI, NIST, or HIPAA are still very challenging tasks for high-velocity organizations. Christoph Hartmann and Dominik Richter explore InSpec and explain how it enables you to easily incorporate compliance and security in your development workflow in order to rapidly ship high-quality and compliant software.

management framework security infrastructure devops tdd
comments powered by Disqus
Continuous auditing for effective compliance with Rudder

Continuous auditing for effective compliance with Rudder

December 25, 2019

Rudder is an open source IT compliance automation tool that focuses on continuously checking configurations to provide a real-time high-level compliance status or break down noncompliance issues to a deep technical level. Jonathan Clarke offers an overview of Rudder and demonstrates how to use it to drill down to any issues that need remediating.
Developing a secure and scalable frontend

Developing a secure and scalable frontend

December 25, 2019

As traffic to websites and web applications increases, infrastructure must be put in place to handle scalingbut with that comes an increased risk for security breaches. James Baker and Mira Thambireddy dive into specific client-side vulnerabilities, discussing design patterns that scale an application securely and which frameworks currently in the market already employ these practices.
Building security into your workflow with InSpec

Building security into your workflow with InSpec

December 23, 2019

When we're looking for improved velocity and speeding up the process of delivering value to customers, incorporating security and compliance requirements is important. Mandi Walls offers an overview of InSpec, a tool that can help bridge the gap between security needs and operational realities in continuous delivery workflows.
Need for speed: Accelerate automation tests from three hours to three minutes

Need for speed: Accelerate automation tests from three hours to three minutes

December 22, 2019

The elephant in the room that every developer ignores is that all automated tests (except unit) are too slow for todays fast-paced, first-to-market environment. With slow automated tests, youre just shipping problems faster to production. Emanuil Slavov explains how the team at Komfo made automated tests run 60x faster using containers, hermetic servers, and improved architecture.
Hadoop and Spark at ING: An overview of the architecture, security, and business cases at a large international bank

Hadoop and Spark at ING: An overview of the architecture, security, and business cases at a large international bank

December 12, 2019

Bas Geerdink offers an overview of the evolution that the Hadoop ecosystem has taken at ING. Since 2013, ING has invested heavily in a central data lake and data management practice. Bas shares historical lessons and best practices for enterprises that are incorporating Hadoop into their infrastructure landscape.
Ansible for SRE teams

Ansible for SRE teams

December 3, 2019

Ansible is a "batteries included" automation, configuration management, and orchestration tool that's fast to learn and flexible enough for any architecture. Join James Meickle to get started with Ansible, with an eye toward sustainable development in cloud environments.