Speaker: Peter Maddison

TACO stands for Traceability, Access, Compliance and Operations and is a set of 20 controls I use as a guideline for helping organizations define automated governance for their software delivery pipelines. The primary purpose of TACO is to provide a common language for the organization to understand what ""good"" pipelines mean for them and how to get there.

This model allows for the creation of opinionated pipelines and helps create a common understanding across teams as to what is required in order to be secure. The TACO approach can be helpful to implementing a DevSecOps program and I’ve used this approach at multiple banks. Having this baseline helps build organizational confidence in the automation of software delivery.

During the talk, I’ll run through the different categories of controls, how they are implemented, their purpose, and how to create robust feedback loops for controls

Get in touch with Sales: [ Ссылка ]

свернуть