Don’t Fall Into the Security vs. Innovation Trap

As agencies shift to a cloud-native approach to field new solutions, the pace of development offered by cloud technologies can present a challenge. Cloud-native technology makes it faster to develop, deploy, and tweak new and existing resources as requirements and missions evolve. The problem is many systems and processes for checking security and compliance struggle to keep pace. IT leaders may feel as if they must choose between applying the brakes to innovation or forcing their cyber team to play perpetual catch-up.

That’s a false choice. Whatever frameworks, mandates, or compliance checks agencies follow, everything comes back to assessing and managing risk. Rather than pitting security and compliance against innovation, agencies can use automation to accelerate their risk management processes and resolve that tension, said Bryan Rosensteel, Public Sector Product Marketing Manager at Wiz.

“If I start from a secure foundation, that accelerates my ability to understand that a system is compliant, which allows me to innovate more quickly than before,” he said. “Now I can adopt those new technologies that I need for mission success.”

In this video interview, Rosensteel talks about how automated risk management can empower innovation through security transformation. Topics addressed include:

• Making security staff more efficient by helping them prioritize their work
• Shortening the time needed for security and compliance checks, such as authorities to operate (ATOs)
• Identifying and addressing vulnerabilities introduced by AI tools (and using AI to strengthen cyber defenses)