Dear Security, Compliance, and Auditors, We're Sorry. Love, DevOps

This event qualifies for 1 CPEs

DevOps solved the Developer and Operators conflict, although forgot other essential folks of the delivery lifecycle: Security, Compliance, and Audit. DevSecOps is an excellent reminder that security must be “DevOps’d,” but compliance and audit are missing. No need for any more DevSecAuditComplianceOps buzzwords. Let’s simply talk about Continuous Authorization. It’s best to think of continuous authorization as Zero Trust principles applied to Continuous Monitoring. What are some best strategies for implementing a continuous authorization for the software delivery lifecycle within your agency?

Speaker and Presenter Information

Ian Anderson

Lead DevSecOps Engineer- Secure Cloud Architecture & Automation, U.S. Navy

Matthew Huston

Chief Information Security Officer Platform One, Office of the Chief Software Officer, U.S. Department of the Air Force

Renata Spinks

Chief Technology Officer, U.S. Marine Corps

Relevant Government Agencies

Air Force, Army, Navy & Marine Corps, Intelligence Agencies, DOD & Military, Office of the President (includes OMB), Dept of Agriculture, Dept of Commerce, Dept of Education, Dept of Energy, Dept of Health & Human Services, Dept of Homeland Security, Dept of Housing & Urban Development, Dept of the Interior, Dept of Justice, Dept of Labor, Dept of State, Dept of Transportation, Dept of Treasury, Dept of Veterans Affairs, EPA, GSA, USPS, SSA, NASA, Other Federal Agencies, Legislative Agencies (GAO, GPO, LOC, etc.), Judicial Branch Agencies, State Government, County Government, City Government, Municipal Government, CIA, FEMA, Census Bureau, Office of Personnel Management, Coast Guard, National Institutes of Health, FAA, USAID, State & Local Government, National Guard Association, EEOC, Federal Government, FDA, Foreign Governments/Agencies, NSA, FCC