Standardization and Security - A Perfect Match - CNSCON.pdf

《Standardization and Security - A Perfect Match - CNSCON.pdf》由会员分享，可在线阅读，更多相关《Standardization and Security - A Perfect Match - CNSCON.pdf（25页珍藏版）》请在三个皮匠报告上搜索。

1、STANDARDIZATION&SECURITY:A PERFECT MATCHFEBRUARY 1,2023RAVI DEVINENISenior Director,Engineering,Northwestern MutualvscarpenterVINNY CARPENTERVice President,Engineering,Northwestern MutualravicdevineniFor 165 years,Northwestern Mutual has been helping families and businesses achieve financial securit

2、y.Revenue$34 billion#97 on FORTUNE 1009,900+Financial Professionals7,600+EmployeesHeadquartered in Milwaukee,WisconsinDowntown NYC Corporate OfficeFigures as of February 2022,unless otherwise notedOur Strength,In Numbers3Figures as of Dec.31,2021,unless otherwise noted4AGENDAParadox of choiceOur exp

3、erience with too many optionsHow standardization helpsOutcomesLessons learnedTechnology and cultural implicationsParadox of choice5TOO MUCH CHOICETOO MUCH CHOICENumber of Cable TV Stations in the US:1761Source:ReelgoodWHY IS TOO MUCH CHOICE PROBLEMATIC?Overabundance of options can lead to Anxiety In

4、decision Analysis paralysis Dissatisfaction Finite amount of mental energy More decisions we must make creates Decision FatigueOur experience9TOO MANY TOOLS-LANDSCAPETOOL SPRAWL-EFFECTSHigh cost of maintenanceIslands ofautomationIncreasedcomplexitySecurity is a challengeLostproductivityWideningskill

5、 gapStandardization12GOLDEN PATHSDrive intentional standardization and simplificationPurposeful evolution of technologyGolden Path:A unified and standard approach to creating applications and infrastructurevs.STANDARDIZED PLATFORMSTANDARDIZED PIPELINEOne Pipeline To Rule It AllStandardized build/sca

6、nning/deployment stagesDevelopment Standards Enforced(Code Reviews,Artifact Sign,Security etc.)CHECKS AND BALANCESEnforcements are key to success.What can we enforce?Programming LanguagesPretty much anything the organization wants(Costs/Resource Limits etc.)Security Scanning in t