How Does Reactive Security Fit Into the Building Blocks of Automation?

Before you can start thinking about automating security, you want to really lay out what are you trying to accomplish. And hopefully it's not running all the time, otherwise you might have a lot of things that need investigated going on in your environment. A policyis code, or embedding security inyour c i c d pipelines, can be looked at as a type of preventative security because you're trying to catch things before they're deployed. It might seem common sense, but you can only work with the tools that are out there, unless you want to build something yourself.