Introduction to CDD and Security Centric System Design - Dmitry Didovicher, Crunchy Data

December 9, 2017

In security centric environments, such as Federal and State Government or large enterprises, even the most mature DevOps teams find themselves unable to deliver value due to complex compliance requirements. Adherence to a particular compliance framework is almost always an afterthought. Compliance Driven Development (CDD) is a way to merge the best practices of Test and Behavior Driven Development with mandatory compliance guidelines into one cohesive, transparent, and fully automated process. You will learn how the use of the Pivotal platform and 100% Open Source Compliance Automation technologies enabled Crunchy to receive the Authority To Operate (ATO) its Crunchy Certified PostgreSQL-As-A-Service Tile at one of the country's largest Intelligence Agencies in record time as part of the NGA's "ATO In a Day" pilot. Slides: TBA Dmitry Didovicher, Director, GIS Development, Crunchy Data Filmed at SpringOne Platform 2017

Healthy Agile Product Security - Molly Crowther

When people think of product security, they think of an enforcer telling them "no" or "don't do that" or "I...

Next Video

CredHub and Secure Credential Management - Peter Blum, Scott Frederick

From the platform all the way down to the microservices which run upon it, secrets are everywhere and leaki...

Introduction to CDD and Security Centric System Design - Dmitry Didovicher, Crunchy Data

Previous

Next Video

Related content in this Stream

Perimeter security isn't sufficient for today's cloud native environments and applications. An integrated and continuous approach is required. VMware's Tanzu and Aria products enable this approach.

Your mission is to secure the vast tracts of land of the cloud native security landscape. Where do you even start?!? It would be preposterous to cover that whole topic in a single session, but we can

We talk about getting PCI compliance into Kubernetes, and other security think in the cloud native world. Securing Tanzu Application Service and Tanzu Application Platform. David Zendzian talks...

We talk about getting PCI compliance into Kubernetes, and other security think in the cloud native world. Securing Tanzu Application Service and Tanzu Application Platform. David Zendzian talks with C

Supply chain attacks are more prevalent than ever. Here are the cloud native security topics experts were focused on at CloudNativeSecurityCon 2023.

Watch a customer panel on cloud native security with Jenny Zhang (Mastercard), Thomas Fredell (Merill Corp.), Kurt Glore (Express Scripts), and Thomas Squeo (West Corp.). Moderated by Justin Smith, Ch

Banks of all sizes are modernizing how they do IT and software development. This blog series explores how banks use Pivotal Cloud Foundry to secure backing services for apps.

The CredHub Service Broker is now a beta. It's a service broker that helps developers secure off-platform service credentials. We examine the tile from the enterprise architect perspective.

Pivotal released the CredHub Service Broker as a beta. It's a service broker that helps developers secure off-platform service credentials with CredHub. Read about the new tile here.

Ensuring Platform Security with Windows Bosh Add-ons and Runtime-Config at Boeing - James Coppock & Sheryl Maris, Boeing We did it! InfoSec said “Not a chance you’re deploying Ubuntu and Windows on P

Banks of all sizes are modernizing how they do IT and software development. This blog series explores how banks use Pivotal Cloud Foundry to secure their cloud-native applications.

PCF 2.1 introduces a new capability that enables multiple development teams working on separate microservices to access the same backing services while maintaining robust security and access controls.

Container registries add important security features to Kubernetes. This post details how Harbor, part of Pivotal Container Service, helps secure Docker images in PKS deployments.

How Synchrony Financial adopted Pivotal Cloud Foundry and reshaped how they approach product security.Synchrony Financial isn’t a new kid on the block. The company, which specializes in private...

Pivotal recently published several new whitepapers: The Auditor's Guide to PCF, Security & Compliance for PCF, and Chargebacks & Showbacks in PCF. This post review the highlights of each paper.

Steeltoe is a toolkit to help .NET developers build apps for Cloud Foundry using established microservices patterns. This post reviews important updates & new features in the project's v2.0 release.