Trust Teams but Verify: Compliance as Code Done Right

Please log in to watch this conference skillscast.

How can organisations enable developers to deliver secure and compliant software without becoming a bottleneck for innovation & a drain on team morale? As a relatively new area, Compliance as Code offers a potential solution to this challenge, allowing organisations to trust their teams without losing potential for auditability and verification.

Compliance as Code brings together all stakeholders including security and developers, to define rules so as to mitigate risk, protect customers and meet regulatory requirements, while not slowing release cycles.

In this talk, Effy will discuss the various aspects of Compliance as Code. They will cover the benefits of Compliance as Code and automation techniques, the pros and cons of different types of controls, some of the common challenges, and lessons from their own experiences building compliance into developer platforms at large organisations.

Download Slides as PDF