05 June 2025 —
14:00 to
14:45 on
Security Stage
In cloud-native era, security shifts left into SDLC to produce secure software by default. Yet, robust security policies are vital to safeguard outcomes. Join us to explore strategies for seamless, scalable security policy implementation that don’t break builds nor deploys.
In the Cloud-Native handbook, security teams are no longer gatekeepers but enablers. The shift-left movement emphasizes embedding a security mindset early in the software development lifecycle, contrasting with traditional approaches where enforcing security policies at the end of development often creates delays and friction between engineering and security teams. However, someone must still guard the gate, and robust security policies are essential to ensure secure and deterministic outcomes. The challenge lies in achieving this without disrupting workflows or introducing unnecessary friction. In this talk, we will explore patterns and strategies for implementing organization-wide security policies effectively. Additionally, we will share lessons learned from rolling out these policies in large-scale organizations.
Read More...
By
José Carlos Chávez [Security Software Engineer — Okta]