EP85 Deploy Security Capabilities at Scale: SRE Explains How

Guest:

• Steve McGhee, Reliability Advocate, Google Cloud

Topics:

• What can security teams learn from the Site Reliability Engineering (SRE) art of rapid and safe deployment?
• Is this all about the process or do SREs possess some magical technology to do this?
• What is SRE approach to automation?
• What are the pillars / components of SRE approach to deployment?
• SRE is also about scaling. Some security teams have to manage 1000s of detection rules, how can this be done in a manner that does not conflict or cause other problems?

Resources:

• Google SRE book
• A companion Google SRE workbook
• "How We Scale Detection and Response at Google: Automation, Metrics, Toil" (ep75)
• "Achieving Autonomic Security Operations: Why metrics matter (but not how you think)" blog
• "Achieving Autonomic Security Operations: Reducing toil" blog.