Day 3: Security Auditing and Compliance

October 17, 2019

As organizations mature their platform practices, they go beyond the standard Day 2 components of upgrading, patching, and continuous operations. In this next day, Day 3, SecOps teams are starting to monitor the security of their cloud-native platforms and workloads. Their organizations are starting to internally and externally audit and validate that the platform is operating with all security controls required by the business and its operating industry. Pivotal Global CTO for Security and Compliance David Zendzian and Pivotal Global CISO Steve White will walk through some of the common challenges with cloud-native security and modern security requirements such as PCI, HIPAA, NIST, and others. This presentation will help security, operations, developers, and businesses navigate how to handle ongoing security requirements running on Cloud Foundry platforms. Learn more: https://pv.tl/2JeC75d Speakers: David Zendzian: Field CISO, Pivotal and Steve White: Field CISO, Pivotal Filmed at SpringOne Platform 2019 Slides: https://www.slideshare.net/Pivotal/day-3-security-auditing-and-compliance

General Motors In-Vehicle App Store and Personalization Case Study

The Infotainment System in GM vehicles makes web service calls to the cloud for an In-Vehicle App Store and...

Next Video

Operating [VMware Tanzu] Application Service at Scale

In 1996, Yahoo! JAPAN was established by Yahoo (US: Altaba) and Softbank, and Altaba sold all the stock to ...

Day 3: Security Auditing and Compliance

Previous

Next Video

Related content in this Stream

Constantly pressured by external factors, the retail industry is facing a massive challenge that is driving a greater need for application modernization. One aspect of this for bricks and mortar store

Here at the Tanzu Division of Broadcom, our business is more committed than ever to innovating VMware Tanzu solutions and services. In this video hosted by industry expert and developer advocate, Mich

There are many tools in the market to facilitate the deployment of open source software as containers in an air-gapped environment. But deploying open source software as Helm charts in an air-gapped e

'The GemFire Side Chats' - brings to you candid conversations around Tanzu GemFire - the product, its features and usage. In this episode, we take you through the transformative role of Tanzu GemFire

Learn how you can gain deep visibility into your open source software supply chain with the Software Package Data Exchange (SPDX) standard software bill of materials (SBoM) from Tanzu Application Cata

If you're lucky enough to have platform group in your company, @thecote shares three things you should ask them to help you with. Read more about the Tanzu Application Service AI beta here: https://t

SOPS (Secrets OPerationS) is an editor of encrypted files and is a simple way to secure and manage sensitive assets. SOPS supports YAML, JSON, ENV, INI, and binary formats. By being able to integrate

Tanzu Application Catalog (an enterprise version of Bitnami Application Catalog) is a catalog of trusted, continuously maintained, and verifiably tested open source software images that is custom-buil

Welcome to an engaging and insightful webinar tailored for Spring Java developers, security teams, and software leaders. We're diving deep into the cutting-edge advancements in the Spring ecosystem –

In this episode, we explore the key features of Spring and why it is so prevalent within the modern application market. Together, lets dive into details on the world's most popular java framework an

Tanzu Developer Advocate and Enlightning host Whitney Lee speaks with Tanzu Solutions Architect, Alex Barbato to unpack the Software Bill of Material (SBOM). SBOMs have gained a lot of attention in th

OpenFGA is a flexible authorization engine built for developers and designed to make it easy for them to model their application permissions and add and integrate fine-grained authorization into their

The Open Policy Containers project provides a secure software supply chain for Open Policy Agent (OPA) policies, enabling a policy-as-code workflow for maintainers and consumers of policies to easily

Yahoo developed and open sourced a service authentication and role-based authorization system called Athenz to address the core zero trust principles. Yahoo uses Athenz to bootstrap their instances de

Start here: https://cote.io/springbill/ Also, see @dashaun's video here: https://www.youtube.com/watch?v=p6iE6hMU9q4

Network Service Mesh takes concepts from traditional L7 application service meshes and brings them down to L3 payloads, enabling your workloads to get the connectivity, security, and observability the

Confidential Containers allow users to run sensitive cloud native workloads in an untrusted cloud. We'll explore how this is possible and how you can use the project with your own workloads. Join h

Fresh from working on developer platforms at Uber, Serdar Badem tells us his experience working on improving developer productivity. He's working at Tanzu now and so he also discusses the work we're d

Explore SPIFFE (Secure Production Identity Framework For Everyone), a CNCF project revolutionizing identity management in cloud-native systems. This session introduces you to SPIFFE’s approach to