Istio for Controls Compliance - Zack Butcher, Tetrate
Channel: CNCF [Cloud Native Computing Foundation]
Date: 20/04/2023

Istio for Controls Compliance - Zack Butcher, Tetrate

Istio's mTLS gets talked about a lot for security and compliance -- but it's only a tiny piece of the puzzle. In this talk, Zack Butcher -- a NIST co-author on microservice security standards and zero trust -- will break down how Istio can be used to satisfy controls for all kinds of regulatory regimes. We'll look at specific use cases of folks using Istio to help implement a variety of controls for PCI DSS, FedRAMP, and GDPR compliance in production. Finally, we'll take a forward look at an upcoming NIST Special Publication on Zero Trust (which Zack is co-authoring) and discuss how Istio can be used as a stepping stone from a traditional perimeter based security model to a modern identity based model. You'll leave this talk with a solid understanding of the types of controls Istio can be used to implement, how to actually implement a variety of them, and an understanding of how Istio can be used to iterate forward on your security posture.