DevOps & Insurance Company: create a bridge between security and change

By Jonathan Le Lous

Elevator Pitch

During this presentation we will go through our technology stacks included Kubernetes, Docker, Microservices… and see how has been our approach to integrate security strategy in our open source platform. Our Gaps & Successes…

Description

Integrating DevOps and Open Source tooling inside an Insurance Company as Manulife is, obviously, a challenge. Actually this challenge is not only technological, links with legacy apps, but also a cultural shift to a new security and risk era. In our journey to DevOps, people were surprised by how we have been close to security and risk teams. Most of people try to avoid them and they expected from us the same. Behind their expectation there are the same old questions ‘But open source and security are not contradictory?’ and ‘If you would like to move faster, how could you do that with security restrictions?’. During this presentation we will go through our technology stacks included Kubernetes, Docker, Microservices… and see how has been our approach to integrate security strategy in our open source platform. Our Gaps & Successes…

Notes

I’m hoping our experience could help to contribute at a better understanding on regulated industry needs and help to build future product roadmap and initiatives inside the community.