Data Next Step is preparing a webinar on one question: how do you integrate governance, risk and compliance (GRC) into a modern DevSecOps pipeline?
The date and the registration details will be announced. This page will carry them when they are ready.
What the webinar is about
DevSecOps puts security checks inside the same pipeline that builds and ships your software. GRC asks a different question: can you show that you manage risk and follow your rules?
Teams often keep these two apart. Developers work in the pipeline, and compliance work happens later, by hand, before an audit. The webinar looks at how to bring them together so that the pipeline itself produces the evidence.
How GRC fits the pipeline
The diagram shows the idea. Governance and risk guide the work at the start (Plan) and at the end (Release). Compliance evidence is collected where the pipeline tests the software (Test) and where it watches it in production (Monitor).
flowchart LR Plan --> Code --> Build --> Test --> Release --> Monitor Governance[Governance and risk] -.-> Plan Governance -.-> Release Compliance[Compliance evidence] -.-> Test Compliance -.-> Monitor
Who should attend
The topic suits anyone who builds software and answers to a standard, a customer or a regulator. This includes engineering leads, security leads and the people who prepare audits.
If you want to prepare, read what we already publish on IT automation and AppSec and on compliance.
Stay informed
We will announce the date and the registration details on this blog. You can also contact us if you want to ask about the webinar.
