How to Eliminate Privilege Management Toil with Security as Code

From startups to large organizations, handbook-based security policy management rarely scales well and is often applied in a non-uniform way. In this talk, we’ll explore how to overcome privilege management toil using the example of on-call access management. We’ll show how to use Security as Code to codify policies, provide visibility, and enforce controls in the same way, every time. With machine-readable policies, authorization can be offloaded to security software, reducing the toil necessary to constantly monitor and maintain one-off requests.

In this lightning talk, you will learn:

• How to overcome privilege management toil
• How to use Security as Code to codify policies, provide visibility, and enforce controls in the same way, every time
• How to simplify on-call access management with PagerDuty