Every decision you make is a forecast. You are forecasting that your choice is going to be better for your organization than the alternatives. Unfortunately, most security groups don’t think this way. Rather, they are falling back on instincts and patterns that they formed in a pre-cloud-native context and expecting the results of their choices to be similarly effective. However, the culture and technology surrounding cloud-native is so different, those “forecasts” are wildly inaccurate. This talk discusses the key cultural and technological differences you need to factor into your forecasts and associated decisions you make regarding your applications security program for cloud-native development.

This session will discuss:

• The top 5 assumptions that do not hold for cloud-native development
• How the role of security shifts from that of gatekeepers to that of coaches and toolsmiths
• How these security coaches and toolsmiths should be organized