Company
Date Published
Author
Tim Gonda
Word count
1773
Language
English
Hacker News points
None

Summary

At Datadog, the Cloud Security team faces numerous challenges in securing its complex infrastructure due to finite resources and time constraints. The team adopts a Find, Fix, Remediate, Prevent (FFRP) methodology to tackle risks effectively and avoid the "security treadmill." This approach helps identify systemic root causes of issues, fix them, remediate downstream effects, prevent similar problems from occurring, and establish guardrails to contain future incidents. The team utilizes Datadog Cloud Security Management (CSM) to implement their FFRP methodology, partnering with engineering teams to carry out cloud security strategy and ensuring the right data is sent to the right stakeholders. By adopting this approach, the Cloud Security team reduces open vulnerabilities in CSM to zero and empowers engineers to remediate cloud security risks themselves, without relying on extensive Cloud Security personnel intervention.