DevOps solved the conflict between development and operations. It missed other essential aspects of the delivery lifecycle: security, compliance, and audit. DevSecOps is an excellent reminder that security must be DevOps’d. But, compliance and audit are still missing. There’s no need for a new DevSecAuditComplianceOps buzzword. Instead, let’s talk about continuous authorization, which applies Zero Trust principles to continuous monitoring.
In this tech talk, I discuss practical ways to start with continuous authorization for the software delivery lifecycle using Ploigos.
Check out DevNation for more!