Method and system for ensuring an application conforms with security and regulatory controls prior to deployment

A system for ensuring an application conforms with security and regulatory controls prior to deployment comprising:

• at least one processor;
• and
• at least one memory coupled to the at least one processor, the at least one memory having stored therein instructions which when executed by any set of the one or more processors, perform a process for ensuring an application conforms with security and regulatory controls prior to deployment, the process for ensuring an application conforms with security and regulatory controls prior to deployment including:
• defining one or more asset security policies to be applied to the selection, creation, and/or operation of assets to be used to deploy at least part of an application in a production environment;
• generating asset security compliance data representing instructions for ensuring compliance with the one or more asset security policies;
• defining one or more application deployment security policies associated with the deployment of assets used to implement at least part of the application in the production environment;
• generating application deployment security compliance data representing instructions for ensuring compliance with the one or more application deployment security policies;
• using the asset security compliance data to ensure each asset to be used to implement the application is generated and operated in compliance with the one or more asset security policies;
• and
• using the application deployment security compliance data to ensure that each asset used to implement the application in the production environment is deployed in compliance with the one or more application deployment security policies.

A system for ensuring an application conforms with security and regulatory controls prior to deployment comprising:

• an application;
• a cloud computing environment in which at least part of the application is deployed;
• a data store including virtual asset security compliance data representing instructions for implementing one or more virtual asset security policies and/or ensuring compliance with the one or more virtual asset security policies;
• a data store including application deployment security compliance data representing instructions for implementing one or more application deployment security policies and/or ensuring compliance with the one or more application deployment security policies;
• at least one memory coupled to the at least one processor, the at least one memory having stored therein instructions which when executed by any set of the one or more processors, perform a process for ensuring an application conforms with security and regulatory controls prior to deployment, the process for ensuring an application conforms with security and regulatory controls prior to deployment including:
• using the virtual asset security compliance data to ensure each virtual asset used to implement the application is generated and instantiated in compliance with the one or more virtual asset security policies;
• and
• using the application deployment security compliance data to ensure that each virtual asset used to implement the application is deployed in compliance with the one or more application deployment security policies.

A system for ensuring an application conforms with security and regulatory controls prior to deployment comprising:

• an application;
• a production environment in which at least part of the application is deployed;
• a data store including asset security compliance data representing instructions for implementing one or more asset security policies and/or ensuring compliance with the one or more asset security policies;
• a data store including application deployment security compliance data representing instructions for implementing one or more application deployment security policies and/or ensuring compliance with the one or more application deployment security policies;
• at least one memory coupled to the at least one processor, the at least one memory having stored therein instructions which when executed by any set of the one or more processors, perform a process for ensuring an application conforms with security and regulatory controls prior to deployment, the process for ensuring an application conforms with security and regulatory controls prior to deployment including:
• using the asset security compliance data to ensure each asset used to implement the application is generated and operated in compliance with the one or more asset security policies;
• and
• using the application deployment security compliance data to ensure that each asset used to implement the application is deployed in compliance with the one or more application deployment security policies.