Security and SRE: An Example from Datadog's Combined Approach скачать в хорошем качестве

Security and SRE: An Example from Datadog's Combined Approach

In most companies, Security and SRE organizations are distinctly separate entities and often fall under different executive branches of the company. The work of Security and SRE organizations may appear different, but their goals are the same: keep the company running. This separated structure hinders collaboration, but what if you could change it? Over the past year, Datadog has joined our SRE and Security teams together in a single organization unifying all aspects of reliability. In this session, Angela Beteta Quesada (Engineering Manager, Core Observability) and Tanner Prynn (Engineering Manager, Internal Trust) will share successes and challenges from this new mode of collaboration with concrete examples of the approach and accomplishments of the teams. These examples will provide a peek into how Datadog is evolving our usage of our own product with RBAC, audit logging, security detection, and multi-org management - while also revealing elements of our approach that will be relevant to anyone looking to wrangle a complex SaaS platform. 00:00 Introduction 03:23 Motivations: Security vs Reliability 05:40 Where did we start? 10:32 Partnership with Product teams 16:05 Audit logs 21:54 Org governance 25:51 Factors for success 26:48 Q&A