Like many other companies in the DevOps sphere, we realized early on that compliance can be a serious obstacle to the progress of our sales cycle. Having long-standing experience with security but none at all with compliance we set out to become SOC 2 compliant in our software development process.

We quickly learned there was very little public documentation on how to become SOC 2 compliant. In this session, I will share the way we built the SOC 2 procedures around agile software development and DevOps patterns such as CI/CD and GitOps. Although it typically takes about a year to complete a SOC 2 compliance, we have managed to get certified in less than 6 months.

During this process, we have come to an important conclusion, one which I hope you will arrive at too by the end of this session. You will learn how agile processes and DevOps can address and outperform traditional methods for managing security and compliance. This talk will empower you to tailor your enterprise compliance needs to your desired software development process. In short, software-oriented organizations can have the cake and eat it too.