How to Accelerate your AWS Security Maturity in 2023

How to Accelerate your AWS Security Maturity in 2023

Cloud Security Podcast - This month we are talking about "Building on the AWS Cloud" and next up on this series, we spoke to Chad Lorenc (Chad's Linkedin) about AWS Security Reference Architecture, Cloud Adoption Framework & Security Maturity Model are 3 ways to level up the maturity you have in Cloud . In this episode Chad Lorenc, from AWS shared lessons and talk about How AWS Customers can prepare to use 3 models to Crawl, Walk & Run their security practice.

Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv

Host Twitter: Ashish Rajan (@hashishrajan)

Guest Twitter: Chad Lorenc (Chad's Linkedin)

Podcast Twitter - @CloudSecPod @CloudSecureNews

If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:

- Cloud Security News

- Cloud Security BootCamp

Spotify TimeStamp for Interview Questions

(00:00) Introduction

(03:35) A word from our sponsors - check them out at snyk.io/csp

(03:51) A bit about Chad

(05:38) How things are different in the Cloud

(07:59) The Maturity framework of AWS

(11:20) How maturity scales in AWS

(13:17) Anti-Patterns when building maturity in Cloud

(15:35) Framework examples on how to build maturity models

(19:27) Mapping maturity models to business objectives

(20:19) The role of cloud native tools

(26:23) Patterns in AWS to watch out for

(28:38) Challenges for security leaders trying to get into cloud

(35:07) Foundational pieces for building maturity in AWS

(37:50) How to implement AWS Control tower?

(43:09) Give developers more freedom in cloud

(47:34) Benchmark scales for security maturity

(51:27) Resources to help you build your own maturity roadmap

See you at the next episode!

Tämä jakso on lisätty Podme-palveluun avoimen RSS-syötteen kautta eikä se ole Podmen omaa tuotantoa. Siksi jakso saattaa sisältää mainontaa.

Jaksot(365)

Pentesting AWS Security Agent

Pentesting AWS Security Agent

When cloud providers introduce autonomous AI agents to conduct penetration testing on customer environments, who is responsible when the AI breaks out of scope?In this episode of the Cloud Security Po...

5 Marras 38min

Using LLMs for Enterprise Threat Modeling

Using LLMs for Enterprise Threat Modeling

Creating an application threat model was a resource-intensive process that took weeks or months, resulting in static documents that were abandoned 80% of the time after their initial creation. However...

27 Loka 35min

Mythos Hype vs. Reality: Why You Need an Agentic Harness

Mythos Hype vs. Reality: Why You Need an Agentic Harness

Is the fear surrounding Anthropic’s Mythos model justified? In this episode, Ashish sits down with Johnny Hand, Global CISO at Trend AI and host of The AI Security Brief. Johnny breaks down why turnin...

21 Loka 47min

How Block Solved DNS Vulnerabilities

How Block Solved DNS Vulnerabilities

When companies rapidly migrate to the cloud without strict registrar policies, users often spin up unsanctioned subdomains pointed at third-party services like Vercel or Hugging Face. When those servi...

13 Loka 55min

Why AI Security is Actually a Data Security Problem

Why AI Security is Actually a Data Security Problem

When an AI coding agent hallucinates a software package name, attackers can simply create malicious packages with that exact name, tricking the AI into downloading malware directly into your environme...

8 Loka 40min

Securing Millions of AI-built Apps: How Lovable Defends Against Insider Threats

Securing Millions of AI-built Apps: How Lovable Defends Against Insider Threats

Empowering non-technical users to build production-grade applications requires a proactive, secure-by-design architecture. In this episode, Ashish sits down with Marcus Hallberg and Samuel Kelemen, se...

11 Syys 1h 10min

Why AI Won't Replace Your SOC: Federated Data & APEX Framework

Why AI Won't Replace Your SOC: Federated Data & APEX Framework

Hash values, IP addresses, and domains are virtually useless as primary detection mechanisms in the era of AI-driven polymorphic malware and short-lived phishing kits. If your detection strategy is st...

1 Syys 37min

The "Hunt First" AI Security Strategy

The "Hunt First" AI Security Strategy

Did you know that 82% of all intrusions don't involve any sort of malware, and AI-augmented attacks are up 89% year over year? If your security operations team is solely focused on reacting to known-b...

25 Elo 46min