Articles by Bruce Johnston
A Guide to Continuous Security Monitoring Tools for DevOps
DevOps has accelerated the delivery of software, but it has also made it more difficult to stay on top of compliance issues and security threats. When applications, environments and infrastructure are …
Understanding ISO 27001 Security - and why DevOps teams choose Kosli
Modern software delivery teams find themselves under constant pressure to maintain security and compliance without slowing down the speed of development. This usually means that they have to find a …
Backstage Developer Portal
*Disclaimer: The complete Backstage guide is open sourced on Github and you can suggest changes to the content if you know it needs updates. We continuously review the pull requests and improve the …
The Code Story podcast - how to deliver software with Continuous Compliance and Kosli
How do you “keep the receipts” for your software process? Is it possible to automate change controls and deploy software with Continuous Compliance? Earlier this year, Mike appeared on the CodeStory …
How to prove your SDLC is being followed for compliance with medical standards like IEC 62304
If you’re part of a software engineering team in digital health, medtech, medical devices, Software as a Medical Device (SaMD), etc. you have to comply with regulatory standards. And one of the …
How to achieve compliance with FedRAMP Continuous Monitoring
One of the most common frustrations we hear from CTOs and CISOs is that it’s really hard for them to figure out what they’re supposed to do to achieve software delivery compliance for regulatory …
Docker Inspect Explained: The Essential Guide
These days, it’s hard for a software engineer to go about their work without bumping into a Docker container. But when we bump into one that’s behaving oddly, how do we go about finding …
Help, we’re doing ISO27001! Why, what, and how?
At Stacc, Espen Thomassen Sæverud (CTO) & Øyvind Fanebust (Partner) have extensive experience in banking and finance with particular expertise in the area of Continuous Compliance. In this talk …
Regulations v DevSecOps: Requiem
In this 15 minute lightning talk, Diptesh “Dips” Mishra, CTO for Shoal (a Standard Chartered Venture) talks about the governance challenges that financial services organizations face when they look to …
Inside Investments Unlimited with John Willis
John Willis, Distinguished Researcher at Kosli, dives into Investments Unlimited - the latest novel from IT Revolution. It’s about an investment bank dealing with DevOps, DevSecOps, and IT Risk. John …
Ready to Automate Governance?
