An Unlikely Union: DevOps and Audit
Information Security and Compliance Practices
I'm consulting with a new company and using this as a resource to help them move towards automated pipelines to improve their compliance and interactions with auditors
Many organizations often get stymied when dealing with information security, compliance, and audit requirements. There seems to be a misconception that DevOps practices won’t work in organizations which are under SOX or PCI regulations. In this 2015 Forum paper, seven experts provide high-level guidance on three major concerns about DevOps Practices: DevOps and Change Control, DevOps and Security, DevOps and Separation of Duties.
What's inside
- Expert Guidance — Seven experts in information security and software delivery provide high-level guidance on the three major concerns of DevOps practices.
- Mythbuster — This paper busts the misconception that DevOps doesn’t work in highly regulated industries.
- Audit/Compliance — Breaks down how DevOps and Audit/Compliance are not at odds with each other, but can actually work together.
- Shift Left on Security — This paper shows how implementing a secured delivery pipeline will allow organizations to ensure better security control, less risk, and better compliance.
- Publication Date
- Jun 01, 2015
- Pages
- 27
- Topics
- Audit & Security · Software Delivery & Architecture
- Formats
- epub · pdf
- License
- Creative Commons BY-NC-SA
