EP160 Don't Cloud Your Judgement: Security and Cloud Migration, Again!

[chuvakin]

Guest:

• Merritt Baer, Field CTO,  Lacework, ex-AWS, ex-USG

Subscribe at Google Podcasts.

Subscribe at Spotify.

Subscribe at Apple Podcasts.

Subscribe at YouTube

Topics covered:

• How can organizations ensure that their security posture is maintained or improved during a cloud migration? Is cloud migration a risk reduction move?
• What are some of the common security challenges that organizations face during a cloud migration?
• Are there different gotchas between the three public clouds?
• What advice would you give to those security leaders who insist on lift/shift or on lift/shift first?
• How should security and compliance teams approach their engineering and DevOps colleagues to make sure things are starting on the right foot?
• In your view, what is the essence of a cloud-native approach to security?
• How can organizations ensure that their security posture scales as their cloud usage grows?

Resources:

• Video (LinkedIn, YouTube)
• EP69 Cloud Threats and How to Observe Them
• EP138 Terraform for Security Teams: How to Use IaC to Secure the Cloud
• EP67 Cyber Defense Matrix and Does Cloud Security Have to DIE to Win?
• 9 Megatrends drive cloud adoption—and improve security for all
• Darknet Diaries podcast