Development teams and and DevOps engineers frequently get tasked with providing corporate-level security of an application after the fact. Either in a startup mode or as a corporate side-project experiment, applications are frequently built without security and compliance in mind. Only later, when the application is successful or the Chief Security Office learns of the application, is security and compliance required and the team is frequently left scrambling on how to achieve this. This talk will demystify some of the common experiences everyone goes through in this process and how to ease your transition into a compliant environment. More details here: https://codesync.global/speaker/chad-gibbons/