Cloud Security Baseline For Scale

Cloud Security Baseline For Scale

Cloud Security Podcast - Automating a Security Baseline in Cloud with Olivia Siow (⁠Olivia's Linkedin⁠) and David Levitsky (⁠David's Linkedin⁠). In this episode Olivia and David shared their experience of how they were able to empower developers to always do the right thing through positive reinforcements like making default libraries as part of the AWS Account build to scale security across their organisation. There were lot more gems dropped so def check out the episode.


Episode YouTube Video - ⁠https://www.youtube.com/watch?v=8kpiDcowl2A⁠


Host Twitter: Ashish Rajan (⁠⁠@hashishrajan⁠⁠)

Guest Socials: Olivia Siow (⁠Olivia's Linkedin⁠) and David Levitsky (⁠David's Linkedin⁠)

Podcast Twitter - ⁠⁠@CloudSecPod⁠⁠ ⁠⁠@CloudSecureNews⁠⁠

If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:

- ⁠⁠Cloud Security News ⁠⁠

- ⁠⁠Cloud Security BootCamp⁠⁠


Spotify TimeStamp for Interview Questions

A word from our sponsors - you can visit them on ⁠⁠snyk.io/csp⁠⁠

(00:00) Introduction

(04:16) A bit about Olivia Siow

(04:31) A bit about David Levitsky

(04:54) Cloud Security Baseline

(06:38) Do all organisations need a cloud security baseline?

(07:16) Does cloud security baseline help with scaling?

(07:34) Success Metrics for establishing cloud security baseline

(10:41) The cultural side of building a baseline

(11:40) Anatomy of AWS Cloud Account at Scale

(12:58) Building Blocks of Cloud Security Baseline

(16:54) Non Technical Challenges

(19:24) Organisation Challenges

(21:41) Would larger organisations have multiple baselines?

(23:34) Baseline for Multicloud or hybridcloud

(26:10) Use case with terraform cloud and route 53

(30:26) What telemetry is important

(32:36) Segregating Logs in a cloud context

(33:58) Can be done with any cloud and tool of choice

(34:43) Baseline vs CNAPP + CSPM

(37:56) Team skill requirement

(39:16) The fun section

(45:13) Where can you connect with Olivia and David to continue the conversation

See you at the next episode!

Avsnitt(344)

AI Vulnerability Management: Why You Can't Patch a Neural Network

AI Vulnerability Management: Why You Can't Patch a Neural Network

Traditional vulnerability management is simple: find the flaw, patch it, and verify the fix. But what happens when the "asset" is a neural network that has learned something ethically wrong? In this e...

13 Jan 41min

Why Backups Aren't Enough & Identity Recovery is Key against Ransomware

Why Backups Aren't Enough & Identity Recovery is Key against Ransomware

Think your cloud backups will save you from a ransomware attack? Think again. In this episode, Matt Castriotta (Field CTO at Rubrik) explains why the traditional "I have backups" mindset is dangerous....

16 Dec 202537min

How to secure your AI Agents: A CISOs Journey

How to secure your AI Agents: A CISOs Journey

Transitioning a mature organization from an API-first model to an AI-first model is no small feat. In this episode, Yash Kosaraju, CISO of Sendbird, shares the story of how they pivoted from a traditi...

9 Dec 202554min

AI-First Vulnerability Management: Should CISOs Build or Buy?

AI-First Vulnerability Management: Should CISOs Build or Buy?

Thinking of building your own AI security tool? In this episode, Santiago Castiñeira, CTO of Maze, breaks down the realities of the "Build vs. Buy" debate for AI-first vulnerability management.While b...

4 Dec 20251h 1min

SIEM vs. Data Lake: Why We Ditched Traditional Logging?

SIEM vs. Data Lake: Why We Ditched Traditional Logging?

In this episode, Cliff Crosland, CEO & co-founder of Scanner.dev, shares his candid journey of trying (and initially failing) to build an in-house security data lake to replace an expensive traditiona...

2 Dec 202546min

How to Build Trust in an AI SOC for Regulated Environments

How to Build Trust in an AI SOC for Regulated Environments

How do you establish trust in an AI SOC, especially in a regulated environment? Grant Oviatt, Head of SOC at Prophet Security and a former SOC leader at Mandiant and Red Canary, tackles this head-on a...

18 Nov 202542min

Threat Modeling the AI Agent: Architecture, Threats & Monitoring

Threat Modeling the AI Agent: Architecture, Threats & Monitoring

Are we underestimating how the agentic world is impacting cybersecurity? We spoke to Mohan Kumar, who did production security at Box for a deep dive into the threats of true autonomous AI agents.The c...

11 Nov 202547min

AI is already breaking the Silos Between AppSec & CloudSec

AI is already breaking the Silos Between AppSec & CloudSec

The silos between Application Security and Cloud Security are officially breaking down, and AI is the primary catalyst. In this episode, Tejas Dakve, Senior Manager, Application Security, Bloomberg In...

4 Nov 20251h 11min

Populärt inom Teknik

uppgang-och-fall
elbilsveckan
market-makers
rss-technokratin
har-vi-akt-till-mars-an
natets-morka-sida
rss-laddstationen-med-elbilen-i-sverige
skogsforum-podcast
rss-en-ai-till-kaffet
bilar-med-sladd
teknikveckan
hej-bruksbil
rss-veckans-ai
rss-elektrikerpodden
dom-kallar-oss-krypto
ai-sweden-podcast
bli-saker-podden
rss-upplyst-entreprenordirektor
gubbar-som-tjotar-om-bilar
rss-powerboat-sverige-podcast