Guest:
- Steve McGhee, Reliability Advocate, Google Cloud
Topics:
- What can security teams learn from the Site Reliability Engineering (SRE) art of rapid and safe deployment?
- Is this all about the process or do SREs possess some magical technology to do this?
- What is SRE approach to automation?
- What are the pillars / components of SRE approach to deployment?
- SRE is also about scaling. Some security teams have to manage 1000s of detection rules, how can this be done in a manner that does not conflict or cause other problems?
Resources:
- Google SRE book
- A companion Google SRE workbook
- “How We Scale Detection and Response at Google: Automation, Metrics, Toil” (ep75)
- “Achieving Autonomic Security Operations: Why metrics matter (but not how you think)” blog
- “Achieving Autonomic Security Operations: Reducing toil” blog.