Is DevOps the Best Thing to Ever Happen to Security?
Many of us have heard this story before, and it goes something like this:
Developers are focused on one thing and one thing only - speed. They expunge anything that gets in their way or slows them down. And they can, because successful DevOps is becoming a core competitive differentiator for many organizations.
Security leaders are focused on one thing and one thing only - risk. They are vigilant with ensuring compliance with enterprise policy and abhor change. And they can, because major cyberattacks and security breaches can become company killers.
It doesn’t take much imagination to picture these two functions at odds with one another. Even InfoSec professionals, 77 percent of them according to Gartner, agree that their own policies slow IT’s ability to respond quickly to the needs of the business. However, the trend among IT leaders is about increasing throughput and speed. A recent study looked at the differences between high and low IT performers and found that high performers deploy code 46x more frequently, have 440x faster lead times from commit and deploy, and are 2x more likely to exceed profitability and market share goals. How can DevOps and InfoSec bridge this divide spanning speed and risk?
Join DevOps pioneer, author, researcher and entrepreneur, Gene Kim, this Wednesday at 2 p.m. ET as he and our own Corey Bodzin discuss how shifting left with security can reduce an organization’s Cyber Exposure. You will learn why “DevOps is awesome for InfoSec” with the ability to integrate security into the development process and be welcomed by developers. Gene will also discuss three ways for InfoSec to partner with DevOps to ensure superior code quality. Finally, Corey will provide an example of a secure DevOps solution today supporting Docker containers that incorporates security as a critical test early into the software development lifecycle.
Webinar attendees will have a chance to win one of two hundred copies of The DevOps Handbook or The Phoenix Project as an added bonus. We hope to see you on Wednesday for this one-of-a-kind session!
Related Articles
What To Keep in Mind When Securing Kubernetes Persistent Volumes
May 21, 2024To many, Kubernetes is a black box that’s difficult to understand, manage and secure. If you’re using stateful persistent volumes – cloud resources that live and manage data outside the scope of your pods – it can be even darker.
Unlocking Kubernetes Innovation Through Simplified Cloud Security with Tenable
March 19, 2024Tenable Cloud Security simplifies Kubernetes security by providing any containerized environment with new features including easy custom policy enforcement, enhanced access control, Helm charts scanning and workload protection. The capabilities offer powerful means for securing your clusters effortlessly, with meaningful, identity-driven insights.
Taking Control of Kubernetes: Enforcing Least Privilege to Secure Your Kubernetes Environment
March 18, 2024Kubernetes has become the de facto standard for managing containerized workloads in private and public clouds. However, security standards have failed to keep pace, leading to increased risk of cyberattacks and data breaches for insecure or misconfigured platforms. Here we examine the challenges involved and explain how to protect your Kubernetes environment by enforcing least privilege across all deployments – whether on-premises or hosted in the public cloud.
Securing Financial Data in the Cloud: How Tenable Can Help
November 4, 2024Preventing data loss, complying with regulations, automating workflows and managing access are four key challenges facing financial institutions. Learn how Tenable can help.
Cybersecurity Snapshot: Apply Zero Trust to Critical Infrastructure’s OT/ICS, CSA Advises, as Five Eyes Spotlight Tech Startups’ Security
November 1, 2024Should critical infrastructure orgs boost OT/ICS systems’ security with zero trust? Absolutely, the CSA says. Meanwhile, the Five Eyes countries offer cyber advice to tech startups. Plus, a survey finds “shadow AI” weakening data governance. And get the latest on MFA methods, CISO trends and Uncle Sam’s AI strategy.
FY 2024 State and Local Cybersecurity Grant Program Adds CISA KEV as a Performance Measure
October 31, 2024The CISA Known Exploited Vulnerabilities (KEV) catalog and enhanced logging guidelines are among the new measurement tools added for the 2024 State and Local Cybersecurity Grant Program.
- Container security
- DevOps
- Tenable.io Container Security