One should really consider DevSecOps when dealing with a large infrastructure involving dozens or hundreds of micro services. Security as Code by design should

One should really consider DevSecOps when dealing with a large infrastructure involving dozens or hundreds of micro services. Security as Code by design should be implemented as soon as possible. In my current gig - the following 3 points are key: - 24x7 Proactive Security Monitoring - Shared Threat Intelligence - Compliance Operations I would really advise anyone interested in this subject to check out DevSecOps manifesto [1]. Also - if you are running a k8s cluster for all your micro-services, there are several guides online as to best practices (see [2] for example). ---------- [1] https://www.devsecops.org/ https://www.devsecops.org/ [2] https://dev.to/petermbenjamin/kubernetes-security-best-practices-hlk https://dev.to/petermbenjamin/kubernetes-security-best-pract...