Commit 2cd485d8 authored by Lars's avatar Lars

content refactoring

parent c1eb4310
Pipeline #43148239 passed with stages
in 1 minute and 56 seconds
......@@ -93,7 +93,7 @@
1. Title Slide
2. Intro
3. Security approaches from the past
4. DevOps changes everything
......@@ -355,7 +355,7 @@
<!-- .slide: data-background="#ca4e32" -->
## 1. Getting rid of the islands
- no more Dev vs. Ops vs. Sec
### no more Dev vs. Ops vs. Sec
</script>
</section>
......@@ -369,10 +369,10 @@
- Top -> Down <!-- .element: class="fragment" data-fragment-index="1" -->
- set everyone in a room together and let them discuss their challenges <!-- .element: class="fragment" data-fragment-index="2" -->
- listen to concerns and collaborate <!-- .element: class="fragment" data-fragment-index="3" -->
- _dont use traditional push by fear security approach_ <!-- .element: class="fragment" data-fragment-index="4" -->
- dont use traditional push by fear security approach <!-- .element: class="fragment" data-fragment-index="4" -->
- Bottom -> Up <!-- .element: class="fragment" data-fragment-index="1" -->
- win minds and hearts of people who are directly impacted by new tools and services <!-- .element: class="fragment" data-fragment-index="5" -->
- let them advocate new tools to their management <!-- .element: class="fragment" data-fragment-index="6" -->
- let them advocate new tools / processes to their management <!-- .element: class="fragment" data-fragment-index="6" -->
Note:
- define security champions which communicate ideas to their peers
......@@ -385,7 +385,7 @@
<!-- .slide: data-background="#ca4e32" -->
### 1.2 Logging & Monitoring
- share information across departments that is relevant for their service: <!-- .element: class="fragment" -->
- share information that is relevant for a product across departments: <!-- .element: class="fragment" -->
- bugs, logs, customer service reports, tickets, issues, outage info, QoS, latencies, etc. <!-- .element: class="fragment" -->
- everyone must have context and visibility for events to be able to react on it <!-- .element: class="fragment" -->
......@@ -480,9 +480,9 @@
<!-- .slide: data-background="#ca4e32" -->
### 3.2 Continous improvement for security services
- instead of set everything in-stone adapt to change
- try different approaches, iterate on them and improve
- focus on delivering the best solutions for dedicated problems
- instead of set everything in-stone adapt to change <!-- .element: class="fragment" -->
- try different approaches, iterate on them and improve <!-- .element: class="fragment" -->
- focus on delivering the best solutions for dedicated problems <!-- .element: class="fragment" -->
</script>
</section>
......@@ -543,7 +543,7 @@
<!-- .slide: data-background="#3380c3" -->
# Conclusion
* people are moving into a self adminstrated cloud with or without us <!-- .element: class="fragment" -->
* people are moving into a self administrated cloud with or without us <!-- .element: class="fragment" -->
* so let's adapt security services and support them! <!-- .element: class="fragment" -->
</script>
......@@ -583,16 +583,13 @@
- [Securing DevOps - Review of Approaches - Arseny Chernov](https://medium.com/@arseny.chernov/securing-devops-review-of-approaches-a801742630ca)
- [Cloud Security Assessments: You're Doing It Wrong! -
Bill Burns](https://www.rsaconference.com/events/us17/agenda/sessions/7320-cloud-security-assessments-youre-doing-it-wrong)
- [Awesome DevSecOps](https://github.com/devsecops/awesome-devsecops)
</script>
</section>
</section>
<!-- Concepts -->
<!-- <section data-markdown="content/test.md"
data-separator="^\n\n\n"
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment