Security Compliance as Code

Explore the concept of Security Compliance as Code in this 24-minute conference talk from BSidesSF 2023. Delve into how security compliance frameworks like SOC 2, ISO 27001, and PCI DSS, often perceived as burdensome by engineering and operations teams, are essential for organizations to maintain industry leadership and customer trust. Learn innovative approaches to transform compliance from a perceived obstacle into a streamlined, code-driven process that aligns with modern DevOps practices and enhances overall security posture.