Episode 3: Succeeding with security as code

As more organizations move to the cloud and to continuous deployment, security needs to “follow the ‘as code’ model,” says Marnie Wilking, global head of security & technology risk management at Wayfair. Where historically security engineers and analysts needed to be familiar with tools and implementations for an on-prem environment, the shift to the cloud requires a new set of skills. “If we really want to be able to succeed as security as code, then we need to hire people who can write code,” says Wilking. Her aha moment came when a colleague commented about building a team based on DevOps principles: “it made their team really successful within their business because that was the business model they were following.” Produced by IDG Communications, Inc.