Summary

To conclude, security and compliance is a vast space with many experts who have published dedicated works on the subject. This chapter should not be taken as being all-encompassing but should have you started down the correct path to define and execute a cybersecurity strategy for your IDP. It’s important to know how to keep track of vulnerabilities, and have ceremonies and tooling set up within your organization to catch and surface vulnerabilities in the IDP and the applications it hosts.

While security and flexibility are not natural partners, smart implementations that focus on critical security needs without impeding innovation are the key to providing the developers with the tools they need to be successful and the protections they need to be secure.

Remember – the cost of a security incident can be astronomically expensive and could even result in bankruptcy or trials. While log storage and other security requirements can cost, those costs can be...