What can businesses do to prepare for the cybersecurity bills that recently passed through The House?

189 viewscircle icon1 Upvotecircle icon2 Comments
Sort by:
Executive Coach / Global Chief Information Officer & CISO in Education4 years ago

Everything in the DevSecOps process is being examined with a fine-tooth comb. Why are you using this open source tool? Why are you using PagerDuty? We’re aiming for complete alignment on that, as well as what we’re using for container and configuration management, and what we’re using to go through the code. It’s reevaluating literally every step of the way.

That’s where the teams get to ask for things like Divebell and Lacework, or any of those other tools that they've been looking at, so that we can fill these gaps. We’re putting in some time to walk through the documentation and create the services as we document everything.

Lightbulb on2
VP, Chief Security & Compliance Officer in Software4 years ago

We're doing some reorganization to prepare for these changes. With so much overhead, you can't move at the speed that your developers and organization want. My data security monitor is helping me drive a threat modeling library right now so that I can advance. They need to test this stuff, so hopefully, that will provide some empowerment.

Lightbulb on2

Content you might like

Yes, if followed correctly.39%

Unsure38%

No, there is still a significant risk.19%

Other (please tell us in the comments)3%

View Results

HashiCorp (Terraform, Vault, Packer, etc.)22%

Cloud infra automation (Ansible, Puppet, Chef, etc.)56%

APM (Datadog, AppD, SignalFX, NewRelic, etc.)10%

Others?10%

View Results