1.
SECURING
MODERN
INFRASTRUCTURE
P R AV I N G O YA L
2 4 - M A R - 2 0 1 8 , J O I N T M E E T U P

2.
ABOUT ME
12+
Years
Information
Security
Regulatory
Compliance
Risk
Management
Audit &
Consultation
Product
Managment
Standards &
Authorship
CISSP | TOGAF | CUA | CCSK | CWSP | CIPT | AWS SA – Associate | RHCE | HP-UX CSA | VCP4 | GISP | CloudU | CompTIA CE | ITIL-F | ITSM-F |
CWNA | Mobility+ | Splunk Certified User
https://www.linkedin.com/in/pravin-goyal-
b7299b33/
+91 988 639 6076
pravingoyal101@rediffmail.com
@praving5
og-aws.slack.com
kubernetes.slack.com
azured.slack.com
dockercommunity.slack.com
product-school.slack.com

3.
AGENDA
• Security Primer
• CIS Benchmark Development Process Walkthrough
• Demo

4.
DISCLAIMER
Y O U N E E D T O D O A L OT O F TA L K I N G

5.
SECURITY - ?
• Reduce Attack Surface Area
• Mitigate Risk

6.
RISK - ?
A Risk is the likelihood that
a Threatwill exploit
a Vulnerability,
bypassing Countermeasures,
to abuse an Asset

7.
CONTROLS
Administrative Physical Technical

8.
TENETS OF SECURITY
Confidentiality
Integrity
Availability
• Encryption
• Data Classification
• Access Controls
• Hashing
• Digital Signature
• Anti-virus
• Fault tolerance
• High Availability
• BCP/DRP/Backup

9.
CIS BENCHMARKS
• Not for profit org
• Consensus Driven
• GitHub like contribution
• Security Benchmark for everything !

10.
CIS
BENCHMARK
WALKTHROUGH

11.
D E M O
K U B E R N E T E S
C L U S T E R
S E C U R I T Y
A S S E S S M E N T

12.
T H A N K Y O U