The Long and Windy Road to Cloud Native Security

Explore the complexities of establishing and maintaining a robust Cloud Native Security policy in this 23-minute conference talk. Delve into the importance of organizational buy-in, from top leadership to implementers, and learn how to effectively engage with Infosec to create a scalable security program. Discover the structure of information security programs, their interactions within organizations, and how these translate into defensive procedures. Gain insights on collaborating with Infosec to improve overall security posture and leveraging them as allies in your Cloud Native journey. Examine topics such as the CIA Triad, Risk Management, Zero Trust, and Declarative Policy Control. Learn strategies for engaging with upstream communities, like the CNCF Security TAG's Security Controls Catalog, to enhance your security practices. Understand the value of starting small, sharing findings, and fostering collaboration to build a superior Cloud Native Security framework.