SLC DevOpsDays 2023 - Security and Compliance Workshop
Channel: Salt Lake City DevOps Days
Date: 30/03/2023

Cyber attacks have never been more in the news. From Twitter hacks to identity theft, vulnerabilities are exposing gaps in the application development process. Application security is difficult, especially when security is a separate process from your DevOps workflow. Security has traditionally been the final hurdle to conquer in the development lifecycle.

Join this 2 hour hands-on workshop to gain a better understanding of how to successfully shift security left to find and fix security flaws during development - and to do so more easily and with greater visibility and control than typical approaches can provide.

In this session, we will provide hands-on examples with you in the driver’s seat and explore:
How to achieve comprehensive security scanning - without adding a bunch of new tools and processes
How to secure and protect your cloud native applications and IaC environments within existing DevOps workflows
How to use a single-source-of-truth to improve collaboration between dev and sec
How to manage all of your software vulnerabilities in one place
How to automate and monitor your security policies and simplify auditing
How to set up compliance pipelines to provide consistent guardrails for developers and ensure separation of duties

Agenda:
Intro to GitLab’s complete DevSecOps solution
DevSecOps Roadmap
Uniting Dev and Sec Perspectives
Dev Workflow
AppSec Workflow
Hands-on Integration Workshop
Q&A and Closing

To participate in this workshop, you must have an active GitLab.com account (available via download as a no cost trial license). You will need your laptop with the latest version of Google Chrome and installed. GitLab workshops are intended to provide an introduction to GitLab topics with a hands-on approach. Workshops are not intended to replace training classes. Please be prepared to start promptly at the beginning of class to maximize your experience and minimize disruption of other attendees.

#devops #devsecops #security