Running a Cloud Security Program with No Dedicated Security Team

Security is everyone’s responsibility—but what if you don’t have a dedicated security team? At Sanofi, the platform team successfully runs a cloud security program, ensuring compliance and risk mitigation without slowing down development.

With teams deploying 60+ times per week, security alerts must be handled just like production incidents. Instead of creating separate security workflows, we integrate security monitoring directly into our existing processes. Using Datadog, Sanofi was able to detect  misconfigurations, runtime vulnerabilities, and anomalies in real time - without adding extra friction to engineering teams.

This approach improves efficiency, fosters collaboration across teams, and ensures security is continuously enforced without slowing down innovation.