Book Image

Policy Design in the Age of Digital Adoption

By : Ricardo Ferreira
Book Image

Policy Design in the Age of Digital Adoption

By: Ricardo Ferreira

Overview of this book

Policy as Code (PaC) is a powerful paradigm that enables organizations to implement, validate, and measure policies at scale. Policy Design in the Age of Digital Adoption is a comprehensive guide to understanding policies, their design, and implementation for cloud environments using a DevOps-based framework. You'll discover how to create the necessary automation, its integration, and which stakeholders to involve. Complete with essential concepts, practical examples, and self-assessment questions, this book will help you understand policies and how new technologies such as cloud, microservices, and serverless leverage Policy as Code. You'll work with a custom framework to implement PaC in the organization, and advance to integrating policies, guidelines, and regulations into code to enhance the security and resilience posture of the organization. You'll also examine existing tools, evaluate them, and learn a framework to implement PaC so that technical and business teams can collaborate more effectively. By the end of this book, you'll have gained the confidence to design digital policies across your organizational environment.
Table of Contents (18 chapters)
1
Section 1: Foundation
5
Section 2: Framework
10
Section 3: Tooling

Chapter 12: Integrating Policy as Code with Enterprise Workflows

When trying to leverage Policy as Code across organizations, we need to integrate automation, tools, and platforms with existing processes to achieve cohesion, generating value bigger than the sum of its parts.

One way that governance and management of IT are done is by using frameworks such as Information Technology Infrastructure Library (ITIL) or Control Objectives for Information and Related Technologies (COBIT). We will introduce these frameworks and how we can leverage software to enforce the framework governance structure. These IT service management tools are widespread in enterprises. We will cover them here and integrate them with our Policy Engines (PEs).

Finally, we will cover Continuous Integration and Continuous Delivery (CI/CD), some of the most popular tools, such as Jenkins, Spinnaker, and GitHub Actions, and we will highlight an example of testing our policies in an automated pipeline using GitHub...