How deeply does Effective Platform Engineering cover automated governance?

Defines compliance at the point of change and separates compliance work from platform-based verification, without detailing control implementations.

Automated governance

As explained in Effective Platform Engineering

Automated governance verifies that required security, compliance, or delivery activities occurred through automated platform controls.

Automated governance verifies that required security, compliance, or delivery activities occurred through platform controls. It separates doing compliant work from verifying it, preserving developer autonomy without sacrificing stakeholder assurance. section 1.3.3

The implementation pattern centers on compliance at the point of change:

Provide developers with self-service platform tools that make compliant delivery the normal path. section 1.3.3
Move confirmation of compliance out of the delivery pipeline and into the platform control plane. section 1.3.3
Verify the required state before permitting a change, rather than making another team a delivery bottleneck. section 1.3.3

How Effective Platform Engineering covers it

liveBook manning.com

Read Effective Platform Engineering on liveBook Get the book at manning.com

Related concepts

compliance at the point of changeimplemented by · Compliance at the point of change verifies compliance through a control mechanism before a software change is made.
control planeuses · A control plane is the management and coordination part of a system that governs the configuration, policies, state, and operations of its components and resources.
security controlkind of · A security control is a safeguard, policy, or restriction designed to reduce security risks or enforce security objectives.

This explainer was generated by Manning's knowledge graph from the text of Effective Platform Engineering. The section links point to the parts of the book it draws on.