Guest:

  • Steve McGhee, Reliability Advocate, Google Cloud

Topics:

  • What can security teams learn from the Site Reliability Engineering (SRE) art of rapid and safe deployment?
  • Is this all about the process or do SREs possess some magical technology to do this?
  • What is SRE approach to automation?
  • What are the pillars / components of SRE approach to deployment?
  • SRE is also about scaling. Some security teams have to manage 1000s of detection rules, how can this be done in a manner that does not conflict or cause other problems?

Resources:

  • Google SRE book
  • A companion Google SRE workbook
  • “How We Scale Detection and Response at Google: Automation, Metrics, Toil” (ep75)
  • “Achieving Autonomic Security Operations: Why metrics matter (but not how you think)” blog
  • “Achieving Autonomic Security Operations: Reducing toil” blog.