Hardening the cloud : Assuring agile security in high-growth enviro...

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

SESSION ID:SESSION ID:
#RSAC
Aaron McKeown
Hardening the Cloud: Assuring Agile
Security in High-Growth Environments
(Movin...

Fast
or
Secure
Fast
&
Secure

Beautiful cloud-based
accounting software
Connecting people with the right numbers
anytime, anywhere, on any device
3
1,45...

2009 2010 2011 2012 2013 2014 2015 2016
862,000+
Subscribers globally

#RSAC
Public Cloud Migration
5
Supporting
the next wave
of growth
Reducing our
cost to serve
Improving data
protection
Eli...

#RSAC
Key Challenges
6
Skills are scarce
Regional representation
and recommendations
Application architecture
has to chang...

#RSAC
Challenge #1: Skills are scarce
7
Challenge #1: Skills are scarce
Make an initial investment in education
Join indus...

#RSAC
Challenge #2: Regional representation
8
Challenge #2: Regional representation and recommendations
Build a strong rel...

#RSAC
Challenge #3: Application architecture changes
9
Challenge #3: Application architecture has to change
Work in cross-...

#RSAC
Challenge #4: Automation is key
10
Challenge #4: Automation is key
Make automation a core principle
Start with basic...

#RSAC
Challenge #5: Focus on visibility
11
Challenge #5: Need to focus on visibility
CloudTrail is enabled by default for ...

#RSAC
Challenge #6: Third-party commercial models
12
Challenge #6: Third-party commercial models need to change
Do what we...

#RSAC
Key Principles
13
Repeatable, automated
build and management
of security systems
Accelerated pace of
security innova...

#RSAC
Key Learnings
14
Security by
design-
what’s that?
Communication is
key
Welcome to the
cloud - “Where’s
my span port?...

#RSAC
Key Learnings: Security by design
15
Security by
design-
what’s that?
Build security into every layer
Treat your inf...

#RSAC
Key Learnings: Communication is key
16
Communication is
key
Make everyone a spokesperson
Evangelize and sell your se...

#RSAC
Key Learnings: Measure everything
17
Measure & test,
monitor everything
How do you know what normal looks like?
Cont...

#RSAC
Key Learnings: Where’s my span port?
18
Welcome to the
cloud - “Where’s
my span port?”
Change your way of thinking
E...

#RSAC
The New Paradigm of Shared Responsibility
19
AWS Foundation Services
Compute Storage Database Networking
AWS Global ...

#RSAC
Security as a Service
20
VPN
connectivity
Host Based
Security
Web
Application
Security and
Delivery
Shared Key
Manag...

#RSAC
Multi-Factor Authentication
21
The decision to utilize MFA was a core component of security design
User awareness wa...

#RSAC
Configuration Drift Management
22
Finding the needle in an automated and freedom-to-deploy haystack
Used Netflix Sec...

#RSAC
Host Security Automation
23
Next layer of defense at the host level
Used to monitor, notify, and action instance-lev...

#RSAC
Apply What You Have Learned Today
24
• Activate multi-factor
authentication
• Enable CloudTrail
• Start your first
a...

www.xero.com
@xero
Aaron McKeown
Lead Security Architect
Xero

Share Slideshare

LinkedIn
Facebook
Twitter

Embed

Size (px)

Show related Slideshows at end

WordPress Shortcode

Link

Share
Email

2024 Trend Updates: What Really Wor... by Search Engine Jou... 1063109 views
Storytelling For The Web: Integrate... by Chiara Aliotta 981811 views
Artificial Intelligence, Data and C... by OECD Directorate ... 923520 views
How to Leverage AI to Boost Employe... by SocialHRCamp 392340 views
2024 State of Marketing Report – by... by Marius Sescu 221896 views
Everything You Need To Know About C... by Expeed Software 237729 views

View on Slideshare

1 of 25 Ad

View on Slideshare

1 of 25 Ad