DevOps Automated Governance

9 snips

Oct 4, 2023

In this podcast, Mike Long discusses the challenges of enabling Governance and Compliance in DevOps teams. They talk about the bottlenecks in deploying software quickly, the purpose of Governance and Compliance, the importance of tracking and documentation, and implementing automated governance in DevOps. They emphasize the need for process adherence, proof of following the process, and technology's role in enforcing controls and recording decisions.

Ask episode

Chapters

Transcript

Episode notes

Introduction

00:00 • 2min

Upcoming events, giveaways, and a discussion on enabling governance and compliance into DevOps

01:58 • 2min

The Challenge of Balancing DevOps Efficiency and Business Governance

04:22 • 4min

Importance of Tracking and Documentation

08:52 • 16min

Implementing Automated Governance in DevOps

24:59 • 10min

Mike Long (CEO @_kosli) talks about the challenges of enabling Governance and Compliance into DevOps teams and processes

SHOW: 759

CLOUD NEWS OF THE WEEK - http://bit.ly/cloudcast-cnotw

NEW TO CLOUD? CHECK OUT - "CLOUDCAST BASICS"

All Things Open 2023 is making 5 free passes + a 20% discount available to the Cloudcast community! More than 150 speakers and 175 sessions will be featured in downtown Raleigh October 15-17.

Free Pass (auto-applied until they are gone!)
Once the free pass have been claimed, use this link for 20% off!

Put Generative AI to Work Virtual Conference, 3 Free passes are available! Email us (address below). Once those are gone, use CLOUDCAST40 for 40% off!

SHOW SPONSORS:

Code Comments - An original podcast from Red Hat (Season 2)
Adjusting to new technology, from teams that have been through it
Find "Breaking Analysis Podcast with Dave Vellante" on Apple, Google and Spotify
Keep up to data with Enterprise Tech with theCUBE

SHOW NOTES:

Kosli (homepage)
Supply Chain Levels for Software Artifacts (SLSA)
DevOps Automated Governance (Reference Architecture)

Topic 1 - Welcome to the show. Tell us a bit about your background.

Topic 2 - Let’s talk about building software for businesses. Lots of people have read the Phoenix Project, and yet most companies still struggle to deploy software fast enough. Where are the bottlenecks today?

Topic 3 - What about Governance or Compliance or Auditing as functions? Can you help the audience understand their purpose and what those groups/functions do?

Topic 4 - Software development seems to boil down to lots of impedance mismatches due to managing risk (testing, security, compliance, etc.). How does Kosli play a role in trying to improve those mismatches?

Topic 5 - DevOps Automated Governance. What is it, how is it implemented, what benefits do companies get from it?

Topic 6 - Kosli technology is often described as “a flight recorder for your runtime environments”. Is the recorder primarily for the auditors, or does it become part of operations?

'Topic 7 - How do companies typically get started using Kosli? Does it have to be all at once, are is there a typical Crawl-Walk-Run model?

FEEDBACK?

Email: show at the cloudcast dot net
Twitter: @thecloudcastnet