Back in April we were proud to partner with RSA Conference, IT Revolution, Sonatype, TheNexus and RuggedSoftware.org to bring DevOps Connect: SecDevOps to the Moscone Center. It was a full day of great DevOps and Security presentations. For me personally it succeeded beyond my wildest dreams of highlighting the intersection of DevOps and Security.

The line up of speakers and topics that day was extraordinary.  In no particular order:

Step 1 of 7

14%

Which of the following best describes how you currently monitor and manage systems across your hybrid cloud environment?(Required)

Multiple separate tools for different environments

Multiple separate tools for different monitoring and management functions

Single consolidated dashboard

Custom built monitoring and management solution

No full monitoring and management solution

Don’t know

How valuable would it be for your monitoring and management solution to incorporate predictive analytics to help you identify and address system issues that are critical and not waste time or effort working through all the data and “noise” that is not critical?(Required)

Extremely valuable

Moderately valuable

Somewhat valuable

Slightly valuable

Not valuable

How do you most typically address potential system issues BEFORE they impact your operations?(Required)

Automated workflows and playbooks to remediate potential issues as soon as they are detected

An orchestrated response process that leverages automation, AI, and human expertise to rapidly respond to potential issues

Advanced monitoring tools such as predictive analytics and anomaly detection to proactively identify and address potential issues

Respond to issues as they arise, using manual processes and troubleshooting techniques

A combination of automated remediation, orchestrated response, and/or proactive monitoring to address potential system issues

Don’t know

Other

What methods does your organization use to control and monitor cloud/IT spending?(Required)

Centralized procurement processes

Pre-approved budget thresholds

Automated cost monitoring tools

Department-level spending controls

Regular cost audits and reviews

Cloud cost optimization platform

Approval workflows for resource provisioning

Native financial operations tools provided by the cloud provider

No formal controls in place

Don’t know

Other

Please specify:

Which methods do you rely on most to detect security vulnerabilities in your systems?(Required)

Automated scanning tools

Manual assessments

Vendor notifications

Threat modeling (for early detection)

None of these

Don’t know

Other

Please specify:

What are the TWO most common ways you prioritize vulnerabilities to address within your environment?(Required)

Based on potential impact

Based on exploitability

Regulatory compliance requirements

Based on CVSS scores

Risk-based analysis of multiple factors

First-in-first-out approach

No formal prioritization process

Don’t know

How do you typically handle system updates and security patches?(Required)

Automated updates and patches

Manually review and apply updates and patches on a regular schedule

A combination of automation and manual review

Apply updates and patches on an as-needed basis.

Outsourced update and patch management

No defined process

Don’t know

Other

Δ

• Gene Kim/Josh Corman – Rugged DevOps: Going Even Faster With Software Supply Chains
• Jez Humble – Continuous Delivery
• David Mortman – DevOps Myths Versus Real World Realities
• Julie Tsai – Windfall Wins: DevOps Empowers Agile Security and Compliance
• Constantine Aaron Cois – DevOpsSecFail: DevOps Security Anti Patterns
• Terri Potts – Leading a Horse to Water and Enticing Him to Drink
• Nick Galbreath – BYOD: Bring Your Own Dependencies
• Jessica Devita – No White Boards Allowed
• Rich Mogull – Building Your SecDevOps Toolkit
• Dan Cornell and Kris Curylo – Blending the Automated and the Manual
• Damon Edwards and Alex Honor – Coaches and Toolsmiths
• Dan Cundiff – Why DevOps != the Wild West and How Embracing it Can Improve Security
• Chris Corriere – Automating Enterprise Security
• Chris Walsh – I’m the New Security lead, and I’m Here to Help

The good news is we had hired professional video crew to tape all of the presentations. Then through the efforts of Mark Miller and Derek Weeks of Sonatype the actual presentations were edited into the videos, creating a fantastic video recreation of the sessions.  Here is a short preview of sessions:

In all there are over 10 hours of fantastic DevOps content here spread over the 14 presentations.  Through TheNexus and staging-devopsy.kinsta.cloud we are making them available to you free. The only obligation is your fill out a registration form.

Fill out the form here.

Please note that the form submission will generate an email to verify your identity. You can access the entire video library via that email.  We ask that you please not share the URL of the videos and instead direct viewers to this page or TheNexus to download for themselves.

Also, if you are attending InfoSecurity Europe this week, be sure to check out DevOps Connect: Rugged DevOps, Thursday, June 4 all day at the Olympia. Here is the lineup:

Agenda

8.30- 9.00             Meet and Greet

9.00-9.10              Introductions: Alan Shimel and Wai Man Yau

9.10-9.50              Keynote Presentation: Dr. StrangeOps: How I Came to Embrace Rugged DevOps & SW Supply Chains, Joshua Corman, CTO, Sonatype and Rugged  

9.50-10.30           Maintaining Control While Letting Go, Gareth Rushgrove, Puppet Labs

10.30-11.00         Security at Speed; Best Practices for a Secure DevOps Implementation, Florin Coada, IBM 

11.00-11.30         The DevOps Toolkit, Helen Beal, Head of DevOps, Ranger4 Limited

 11.30-12.00         A Manifesto for High Velocity Compliance, Justin Arbuckle, Vice President, EMEA & Chief Enterprise Architect, Chef

 12.00-13.00         Opportunity to visit the Infosecurity Europe Exhibition

 13.00-13.30         Secrets Within Your Java-Based Software Supply Chain, Derek Weeks, VP, Sonatype & DevOps Advocate

 13.30-14.00         Automating Security Tests for Continuous Integration, Stephen de Vries, CTO, Continuum Security

14.00-14.30         SecDevOps 2.0- Managing your Robot Army, Elizabeth Lawler, CEO and CoFounder, Co-Founder Conjur Inc

14.30-15.00         Case study: DevOps Cost-Effectively Secured Quality and Time-to-Market for a Complex Hardware/Software Network Product, Marc Hornbeek, Senior Solutions Architect, Spirent Communications

15.00-15.15         Afternoon break

15.15-15.45         DevOps:  How the Industrial Revolution Got Us Here, Jonathan Fletcher, Enterprise Architect – Technology & Platform (DevOps) Lead

15.45-16.15         Transforming to Devops in the Enterprise, Benjamin Wootten, Co-Founder, Contino

16.15-16.45         SecDevOps: From Zero to $2.5B Revenue in 18 Months, Justin Lundy, CIO/CTO, Evident.io

16.45-16.50         Thank you and close, Alan Shimel and Wai Man Yau