Jason Maynard

Clouds, Clouds - everywhere there are Clouds! Built-in cloud-based controls only go so far and may be limited in capabilities. With multi-cloud deployments, these technologies become fragmented and add an extra layer of complexity. In this action-packed session, we will discuss security capabilities offered by cloud service providers and how to systematically determine the right controls to secure the cloud environment while empowering practitioners with the ability to stretch these capabilities. This includes coverage across a multi-cloud, on-premises, and SaaS based environment reducing the overall complexity. Clouds inherently have a better security footprint out of the gate compared to traditional environments, but these controls can quickly become complex and fragmented increasing operational overhead in a multi-IT environment and may in fact increase an organization's overall risk. Stepping back and understanding the capabilities, the complexities, and the overall risk to each use case allows practitioners to build comprehensive security solutions that are resilient. We will review the capabilities in general, typical controls required, and then review a fictitious breach that highlights the challenges for practitioners. We will then provide a methodology based on a use case to build security solutions with broader coverage that simplify the overall solution.