Episode 235 - GluuFederation/identerati-office-hours GitHub Wiki
Title: The Principles of GovOps
- Host: Mike Schwartz, GovOps Co-Chair
- Guest: * Co-Host: Rohit Khare, GovOps Co-Chair
Channels
Description
GovOps Co-Chairs discuss each of the 8 proposed GovOps principles and make cases for and against inclusion.
GovOps Core Principles:
- 🔹 Governance is a continuous operational discipline, not a periodic exercise.
- 🔹 Capabilities, defined as (action, resource_type) pairs, are the unit of governance, not identities or roles.
- 🔹 Governance involves three core activities: risk management, accountability, and observability.
- 🔹 True identity is rooted in hardware-backed key protection.
GovOps Supporting Principles:
- 💡 Governance assumes bad things will happen.
- 💡 GovOps is neutral on identity protocols and artifacts.
- 💡 Externalize authorization as much as possible.
- 💡 Governance is an activity performed by governors–the humans responsible for the business.
Homework
Takeaways
- ⚡
- ⚡
- ⚡
- ⚡