In this session, we will discuss how to use threat modeling and security tests earlier in the software development lifecycle to help ensure “continuous security and compliance.” Then, we will address how your devops teams can declare certain PCI DSS compliance outcomes or policies in the code. We will share thoughts on how to build a known good state of your cloud-native infrastructure and use automation to detect and alert on security and compliance drifts.

Sponsored by