Securing Your Healthcare Data with OPA

Explore a comprehensive approach to securing healthcare data using Open Policy Agent (OPA) in this 24-minute conference talk. Learn how to implement a "Shift Left" security strategy by codifying and enforcing policies across microservice architectures. Discover the design of an OPA-driven application development process that enables custom security policy definition and enforcement through Envoy sidecar injection. Gain insights into creating policy-enabled applications that provide least-privilege access to Protected Health Information (PHI) and Personally Identifiable Information (PII). Watch real-world demonstrations of restricting access to sensitive data and controlling inbound and outbound traffic from applications. Understand the differences between PHI and PII, the importance of policy versus practice in healthcare data security, and how OPA can improve DevOps processes. Delve into vertical OPA application, service access management, and internal data access management to enhance overall healthcare data protection.