#hangoutsonair

This article highlights that in continuous develop/deploy environments there are systems, such as Jenkins, to integrate with other systems (hosted and local).

Challenge: To provide some level of assurance, an auditor would need to define these connections and specify a level of trust.

Request: Are teams considering sandboxing their DevOp activities to linkable (and able to document/whiteboard ondemand) systems, or are teams simply not leveraging such abstracted systems?

Curious on ideas on this premise, the reality, and any activities.

Are you listed as a public company?  
Are you being audited under attest standards (i.e., SOC or ISAE 3402)?  
Are you doing DevOps (initial, limited, full speed ahead)?  

Please comment below... I am working with Gene and the team here to begin solving this problem in our shared communities.

""Users who can self-approve eg. developers"; #RunAsFastAsPossible" .. remarks from the twitter-infosec sphere.. Checky but important to know concern exists.  I also am seeing serious organizations allowing common end-users to self-escalate their privileges, so there is a culture of proof for #DevOps in the #Audit & #infosec sphere.  

Are you seeing the same cultural shift?

Broken .. err, well just not turning on anymore.. Yesterday Glass worked, and today the light comes on for charging, but non-responsive.  Anyone had issue?  Fixes?  No visible damage and was simply sitting on desk.. so bummed #broken   #fixes  

Anyone had success in giving away their Glass Invites to help a charity fundraise?  Many approaches .. i.e., Donate to X charity; share receipt; and it's yours... thoughts?  These are all legit charities, just trying to make a better world here.. thx!