EP160 Don't Cloud Your Judgement: Security and Cloud Migration, Again!

Guest:

• Merritt Baer, Field CTO, Lacework, ex-AWS, ex-USG

Topics:

• How can organizations ensure that their security posture is maintained or improved during a cloud migration? Is cloud migration a risk reduction move?

• What are some of the common security challenges that organizations face during a cloud migration?

• Are there different gotchas between the three public clouds?

• What advice would you give to those security leaders who insist on lift/shift or on lift/shift first?

• How should security and compliance teams approach their engineering and DevOps colleagues to make sure things are starting on the right foot?

• In your view, what is the essence of a cloud-native approach to security?

• How can organizations ensure that their security posture scales as their cloud usage grows?

Resources:

• Video (LinkedIn, YouTube)

• EP69 Cloud Threats and How to Observe Them

• EP138 Terraform for Security Teams: How to Use IaC to Secure the Cloud

• EP67 Cyber Defense Matrix and Does Cloud Security Have to DIE to Win?

• 9 Megatrends drive cloud adoption—and improve security for all

• Darknet Diaries podcast