Chapter 2. Playing to Win with Context and Collaboration
Coming together is a beginning, staying together is progress, and working together is success.
Henry Ford
In Chapter 1, the cloud native security game was framed as “they who play best together, win together.” Your teams of security engineers, developers, and runtime operations people have to collaborate closely in order to protect the breadth and depth of your cloud native systems and software development lifecycle. Closer collaboration speeds up your OODA loops, and those who OODA best will win.
Now, let’s take a look at how a Cloud Native Application Protection Platform (CNAPP) meets that challenge, starting with making your security world visible.
Surfacing and Observing Your Security
You can’t control what you cannot see or, better, observe.1 To help support everyone’s need to collaborate on security, your CNAPP needs as much visibility of your system’s current and evolving state as possible. You want your security engineers to define the policies that your cloud native landscape requires, but first, you need to have a grip on the current, real-time, and evolving shape of that landscape, as shown in Figure 2-1.
Figure 2-1. The landscape of artifacts and resources created and managed by your teams
Working from left to right, Figure 2-1 shows the different types of teams and the artifacts that they focus on. Your ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month, and much more.
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.
Julian F.
Head of Cybersecurity
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.
Addison B.
Field Engineer
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.
Amir M.
Data Platform Tech Lead
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.
