DevSecOps 101

Transcript

1. Dev"Sec"Ops 101
   Andre Almar
   Co-Founder - DevOps Bootcamp
   Twitter: andrealmar_
   Instagram: andrealmar
   E-mail: andre@y7mail.com
   

   View Slide

2. Overview
   - O que é Agile
   - O que é DevOps
   - O que é DevSecOps
   

   View Slide

3. Agile
   ● Pessoas > Processos
   ● Software > Documentação
   ● Colaboração > Negociação
   ● Responder a Mudanças > Plano
   

   View Slide

4. View Slide

5. View Slide

6. View Slide

7. View Slide

8. View Slide

9. Patrick Debois
   ● Criador do termo DevOps
   ● Criador do DevOps Days
   ● Autor: Manual DevOps
   

   View Slide

10. View Slide

11. View Slide

12. View Slide

13. https://www.youtube.com/watch?v=LdOe18KhtT4
    

    View Slide

14. View Slide

15. View Slide

16. View Slide

17. View Slide

18. - Leaning in over Always Saying “No”
    - Data & Security Science over Fear, Uncertainty and Doubt
    - Open Contribution & Collaboration over Security-Only Requirements
    - Consumable Security Services with APIs over Mandated Security Controls &
    Paperwork
    - Business Driven Security Scores over Rubber Stamp Security
    - Red & Blue Team Exploit Testing over Relying on Scans & Theoretical
    Vulnerabilities
    - 24x7 Proactive Security Monitoring over Reacting after being Informed of an
    Incident
    - Shared Threat Intelligence over Keeping Info to Ourselves
    - Compliance Operations over Clipboards & Checklists
    

    View Slide

19. Integrar Segurança no
    Processo de
    Desenvolvimento
    

    View Slide

20. View Slide

21. Prover valor mais rápido ao
    seu usuário
    

    View Slide

22. Obrigado
    ● @andrealmar_ on Twitter,
    ● @andrealmar on Instagram
    ● andre@y7mail.com
    

    View Slide