Elevating DevSecOps Security: The Journey to Zero Trust

In the ever-evolving landscape of DevSecOps, the paradigm is shifting towards a proactive approach known as Zero Trust, redefining how security is integrated into the CICD pipeline. This transformation doesn't simply entail developers assuming more security responsibilities but rather involves a holistic restructuring, where security teams engage in early-stage development. Our presentation delves into the evolution from traditional DevSecOps to the advanced realm of Zero Trust. We explore the principles of "Simple DevSecOps" and "Trust but verify," leading up to the pinnacle of security sophistication: "Zero Trust." In a zero trust environment, every element of the DevOps pipeline undergoes rigorous authentication and authorization, ensuring heightened security at every step. In this session, join Jyotirmayee Pradeep Kumar (Vice President of Cloud DevOps at a well-known global bank) as she unravels the concepts of "Security as Code" and "Policy as Code" as instrumental tools in implementing zero trust. Topics for discussion include: - The foundational principles of DevOps and its evolving landscape. - The pivotal role of security within the DevOps framework. - The benefits and challenges of zero trust in DevOps environments. - Practical strategies for implementing zero trust in the CICD pipeline. - Diverse approaches to integrating zero trust seamlessly into your DevOps practices.