Slides for the SaltConf19 Keynote

2. “S” is For
Sharing. From the trenches,
pass the salt, please.
Will Gregorian
11/2019

3. Not ME

4. I should go into security
Also, not me

5. In reality, it was
security by way of
checkboxes, and
“controls” evidence
gathering.

6. InfoSec only cared about IP networks & IDS, preached on-
prem cared little about *nix or Dev.

8. DevOps devours InfoSec

9. “DevOps introduced vulnerabilities by making security decisions that aren’t
complying with the company policy and standards”
Looks like my old boss.

10. “DevSecOps has shown us that organizations are performing significantly less manual
work, seamlessly blending security into their Devs’ world, and are better prepared
to remediate security incidents”

11. Testing SecOps IRL
Will Gregorian,
CISO
@WillGregorian
Meets
Corey Quinn,
DevOps
Enthusiast
@QuinnyPig
Also, a Cloud
Economist

12. Configs & Orchestration Codified - Living
Security Policies

13. SecOps helps compliance achieve nirvana

15. Thank you
Twitter: @WillGregorian
LinkedIn: /in/william-gregorian/