We will talk about how people do perceive cloud computing and how to link it with a cybersecurity plan. Is cybersecurity compatible with public clouds? Main points that will be covered: • Examples of cybersecurity techniques/ technologies • What is cloud computing – different types of cloud • Measure to take care of when working with Cloud Computing • Examples of technologies adapted to “secure the cloud” Presenter: Eric Fourn is a security and virtualization / cloud professional with more than 12 years of experience. He holds certifications in virtualization and security. Also he is certified instructor for virtualization technologies and a PECB trainer. He wrote a book on VMware vSphere 5 (editions ENI). Link of the recorded session published on YouTube: https://youtu.be/Dp6YF7BagQc

1. Embracing Cybersecurity on the cloud
November 1st, 2016

2. Eric Fourn
Virtualization architect, trainer
Virtualization and security geek since more than 10 years.
IT architect, trainer (VMware Certified Instructor, former Citrix Certified
Instructor, PECB certified trainer)
.
Contact Information
+33660494592
Efourn@engineering-fabrics.fr
linkedin.com/in/eric-fourn-vci
twitter.com/efourn

3. 3
Embracing security on the cloud
Agenda
 What is cybersecurity?
 What is cloud computing?
 IT infrastructure of the cloud
 Cloud services
 How do people perceive public
clouds?
 Link public clouds and cybersecurity
plan
 Certifications, safeguards for a cloud
provider
 ISO standards, frameworks
 Q & A

4. 4
Embracing cybersecurity on the cloud
What is cybersecurity?
 A subset of Information
security
 Concerns digital information
 Data created, managed and
carried with computers,
smartphones, tablets
 “Carriers” connect to unsecure
networks

5. 5
Embracing cybersecurity on the cloud
What is “cloud” (computing) ?
 NOT technology
 Consumption model : IT as a
service
 Internal / External
 Private (in-house) / Public
(elsewhere) / Hybrid (both)

6. 6
Embracing cybersecurity on the cloud
IT infrastructure of the cloud
 On demand
 At scale
 Multitenant

7. 7
Embracing cybersecurity on the cloud
Cloud services : heading to the right type
 IaaS
 PaaS
 SaaS
 DaaS
 MSaaS

8. 8
Embracing cybersecurity on the cloud
How do people perceive public clouds?
 For SaaS (storage and file
sharing, email, social
networking, document editing)
 Not secure (data on the
internet)
 For personal use (facebook,
icloud, gmail, mega)

9. 9
Embracing cybersecurity on the cloud
Link public cloud and cybersecurity plan - A
 Strong training and
awareness plan is required
 Consider cloud infrastructure
as outsourcing
 Responsibilities / perimeters
are to be set
 Consider securing data
transfer and data encryption

10. 10
Embracing cybersecurity on the cloud
Link public cloud and cybersecurity plan - B
 Consider data that can/cannot
be on the cloud
 Remain the one who use the
cloud (not the other way
around)
 Know the Cloud
 The Cloud/Internet know us
(usually more than we think)

11. 11
Embracing cybersecurity on the cloud
Certifications, safeguards for a cloud provider
Look for :
 ISO standards (up to date)
 Frameworks used (accurate)
 Certifications (accredited)
 References (same or close to your business)
 Stability (financial, management)

12. 12
Embracing cybersecurity on the cloud
ISO standards, frameworks - A
Look for :
 NIST guide to information technology security services
 ISO/IEC 27001 – Information security management
 ISO/IEC 27017 – IT – security techniques – code of
practices for information security controls based on
ISO/IEC 27002 for cloud services
 ISO/IEC 27018 – IT – security techniques – code of
practice for protection of personally identifiable
information (PII) in public clouds acting as PII processors

13. 13
Embracing cybersecurity on the cloud
ISO standards, frameworks - B
ISO/IEC 27032:2012 :
 Is a guidance for improving the state of Cybersecurity
 covers the baseline security practices for stakeholders in
the Cyberspace
 Is for individuals – organizations cannot be certified
against ISO/IEC 27032
 Links technical and security management system

14. IT Security Training Courses
 ISO/IEC 27032 Lead Cybersecurity Manager
5 Day Course
 ISO/IEC 27034 Application Security Foundation
2 Days Course
 ISO/IEC 27034 Application Security Lead Implementer
5 Days Course
 ISO/IEC 27034 Application Security Lead Auditor
5 Days Course
Exam and certification fees are included in the training price.
https://www.pecb.com/it-security | www.pecb.com/events

15. THANK YOU
?
+33660494592
efourn@engineering-fabrics.fr
linkedin.com/in/eric-fourn-vci
twitter.com/efourn