DevSecOps Security Enabling Business and Innovation
•
2 gefällt mir•441 views
Security at the Speed on Innovation. First hand experiences on building and operationalizing DevSecOps and Security Programs for customers, Shift-Left-Left, Cyber Security Maturity Model (CSMM) and more.
Empfohlen
Weitere ähnliche Inhalte
Ähnlich wie DevSecOps Security Enabling Business and Innovation
Ähnlich wie DevSecOps Security Enabling Business and Innovation (20)
Kürzlich hochgeladen
Kürzlich hochgeladen (20)
DevSecOps Security Enabling Business and Innovation
- 1. Security Strategy Enable business and innovation
- 2. “… in a fast, flexible, complex & ever changing environment” Monica Verma Monica Verma 2019
- 4. 43% 22% Monica Verma 2019 Src: The State of DevOps on Financial Services
- 5. “Everyone wants to be innovative and ahead of their competitors, but very few are willing to change the way they work” Monica Verma Monica Verma 2019
- 6. “Security as an enabler We cannot win this cyberwar without the security arsenal” Monica Verma Monica Verma 2019
- 7. Monica Verma Head of Cloud Security Monica Verma 2019
- 11. Better the world Change Modernization A shift New ideas Monica Verma 2019
- 12. Better the world Change Modernization A shift Monica Verma 2019 New ideas
- 13. Better the world Change Modernization A shift Monica Verma 2019 New ideas
- 14. + Bank + Digital Library + Camera + Health + Payments + Social Effective, productive and innovative, secure and safe Monica Verma 2019
- 15. “Security that enables companies to do today and tomorrow that they were not able to do yesterday” Monica Verma Monica Verma 2019
- 16. “Innovation in Aluminium Aluminium inspires designers, architects and engineers to innovate and challenge the status quo. The flexible metal has endless possibilities to create exciting products that change the way we live in innovative and sustainable ways.” Hydro Monica Verma 2019 Src: hydro.com
- 17. Monica Verma 2019 Src: nrk.no, helpnetsecurity.com dated 27.03.2019 “Digital threats will be a part of everyday for Norwegian companies in the years to come” Ole Erik Almlid CEO, NHO 350 MNOK Hydro 2019
- 18. During the year ended December 31, 2018, the Company recorded $401.2 million of pre-tax expenses related to the 2017 cybersecurity incident and insurance recoveries of $75.0 million for net expenses of $326.2 million. Src: equifax.com Monica Verma 2019 148 mill. Equifax 2017 2,8 mrd. NOK Equifax siden 2017 2,5 mrd. NOK Maersk 2017 “Digital threats will be a part of everyday for Norwegian companies in the years to come” Ole Erik Almlid CEO, NHO
- 19. “We are committed to being an industry leader in security and technology.” Equifax, 2018 Annual Report Monica Verma 2019
- 20. Monica Verma 2019 3 mrd. Yahoo 2013 383 mill. Marriott Intl. 2014 148 mill. Equifax 2017 110 mill. Target 2013 57 mill. Uber 2016 ~350* MNOK Hydro 2019 2,5 mrd. NOK Maersk 2017 *as per 27.03.2019
- 21. Top 5 threats acc. to Global CEO Survey Challenge Monica Verma 2019 Src: pwc.com
- 22. 77% CISO face the dilemma Monica Verma 2019 Src: bromium.com
- 23. 77% CISO face the dilemma Monica Verma 2019 Src: bromium.com
- 25. Monica Verma 2019 3 C’s Enable business?
- 26. What are brakes for? To slow down? To stop? Monica Verma Monica Verma 2019
- 27. “Brakes are for going fast” They give us the safety and security to be able to drive fast Monica Monica Verma 2019
- 28. What brakes are to fast speed, security is to innovation Monica Monica Verma 2019
- 30. Monica Verma 2019 Pic source: sportskeeda.com
- 31. Seamless & Integrated security & privacy Monica Verma 2019 Goal
- 32. At the speed of Innovation Monica Verma 2019 Security
- 33. Plan Code B uild Test Release D eploy O perate Monitor Risk & Threat Modeling Delta Risk and DPI Assessment Test Code Review SAST DAST Pen-testing & Intrusion Detection Log & Security IncidentMonica Verma 2019 Pic source: sportskeeda.com 1. DevSecOps
- 34. Plan Code B uild Test Release D eploy O perate Monitor Risk & Threat Modeling Delta Risk and DPI Assessment Test Code Review SAST DAST Pen-testing & Intrusion DetectionLog & Security Incident Monica Verma 2019 Pic source: sportskeeda.com 2. Automate
- 35. Monica Verma 2019 Pic source: sportskeeda.com 2. Automate § Continuous Testing (CI/CD) § Infrastructure as Code/Security Patterns (Reuse) § Continuous Compliance (e.g. Live Dashboards)
- 37. DevSecOps Risk Owners OperationsProduct SecurityGovernanceand Risk Monica Verma 2019 Development Security ChampionIntegrated Sec. SHIFT-LEFT Security Awareness 3. Integrate Shift-Left-Left SHIFT-LEFT-LEFT
- 38. Security Steering Committee Monica Verma 2019 OperationsCXO Development Stakeholders SHIFT-LEFT-LEFT Product Marketing
- 40. Security MODEL Security Awareness RISK-driven & BC Anchoring INTEGRATION within the BUSINESS Cyber Sec Maturity Model (CSMM) Monica Verma 2019 BUSINESS Supply Chain THREAT & Vulnerability Governance & Compliance
- 41. Monica Verma 2019 Security MODEL Security Awareness RISK-driven & BC Anchoring INTEGRATION within the BUSINESS BUSINESS Supply Chain THREAT & Vulnerability Governance & Compliance Category X Cyber Sec Maturity Model (CSMM)
- 42. “Security that enables companies to do today and tomorrow that they were not able to do yesterday” Monica Verma Monica Verma 2019
- 43. Monica Verma 2019 INNOVATION & DIGITALIZATION Enabled and Secured Pic sourcc: sportskeeda.com