Addressing public cloud security and compliance is overwhelming given the lack of visibility and monitoring security teams have over their assets in the cloud. This problem is further compounded given the cloud’s benefits of speed and scale and that legacy security tools simply can’t keep pace. Alarmingly, Gartner predicts that through 2022, at least 95 percent of cloud security failures will be the fault of the customer. Join us for a live webinar with Dan Hubbard, Chief Product Officer at Lacework on how to overcome the challenges of protecting your cloud and how to automate security and compliance across AWS, Azure, and GCP, including: Where traditional security falls short and common threats start Why end-to-end visibility is critical across all of your cloud environments How to scale compliance and audit control as your cloud footprint expands What to consider when securing workloads and containers

1. How to Kickstart Security and Compliance for Your
AWS, Azure, and GCP Clouds

2. Dan Hubbard
Chief Product Officer
Lacework
TODAYS SPEAKER

3. Major Security Technology and Market Transition
BIG SHIFT IN TECH. LARGE DIVERSE
ATTACK SURFACE
ITW BREACHES

4. SHIFT IN TECHNOLOGY
SaaS PaaS/IaaS
CLOUD WAVE 1
CLOUD WAVE 2

5. LARGE, DIVERSE, ADDRESABLE ATTACK SURFACE
“Through 2022, at least 95% of cloud
security failures will be the fault of
the customer.” -
“If you can configure it you need to
secure it.” -
Security *of* the cloud
Security *for* the cloud

6. LARGE, DIVERSE, ADDRESABLE ATTACK SURFACE
Developers are
insecure.
Security slows us
down.

7. IN-THE-WILD ATTACKS + BREACHES
Data leaks
Publicly exposed object storage
Data exfiltration
Cloud server breaches
Hijacked computer resources
Crypto-mining attacks

8. Remote code
exploits
Container escape
vulnerabilities
Data exfiltration Cloud server
compromises
Insecure APIs SSH Brute
Force attacks
Malware injection
attacks
Crypto-mining
attacks
Malicious insiderData leaks
IN-THE-WILD ATTACKS + BREACHES

9. Account Security
Compliance & Audit Control
Workload / Container Security
Host intrusion
detection (IDS)
Runtime
container security
Application
visibility
Threat investigations
& resolution
File integrity
monitoring (FIM)
Cloud account
security
Misconfiguration
detection
Compliance
reporting
Security
analytics
Anomaly
detection
The Problems You Need to Solve – Organization's Responsibility
CIS Benchmark
compliance
PCI DSS
compliance
SOC 2
compliance
HIPAA
compliance
FISMA
compliance

10. SECURITY TOOLSSECURITY CHOICES ARE CHALLENGING FOR CLOUD
Firewalls
Network IDS
SIEM
VPC Flow
Analytics
Configurations
Container
Security
OSSEC
OSQuery
Security
Monkey
LEGACY TOOLS OPEN SOURCE POINT SOLUTIONS

11. WHY IS OPERATING SECURITY FOR CLOUD SO HARD?
WHY IS OPERATING SECURITY FOR
CLOUD WORKLOADS SO HARD?

12. LACK OF VISIBILITY, AUTOMATION, SPEED
Lack of security
visibility into
workloads
Low degree of
automation for
detecting threats & risks
Security must be run
at the speed DevOps
and cloud scale

13. WHAT IS LACEWORK
WHAT IS LACEWORK?
Automated security for cloud workloads
Purpose built for servers, containers, & Kubernetes
High fidelity threat detection and alerting
Engineered for massive scale
Unified security platform

14. LACEWORK FOR WORKLOAD SECURITYLACEWORK FOR WORKLOAD SECURITY
Host intrusion
detection
Runtime Container
& K8s security
File integrity
monitoring
Threat & incident
investigations
Private cloud

15. LACEWORK FOR ACCOUNT SECURITYLACEWORK FOR ACCOUNT SECURITY
Compliance monitoring
for AWS, Azure, & GCP
Compliance reporting
for CIS benchmark,
PCI DSS, & SOC 2
Misconfiguration
detection & alerting
Anomaly detection
for API behaviors
& audit logs

16. EASE OF DEPLOYMENT
Lacework SaaS Dashboard
Alerting via:
Lacework Polygraph®
• Unsupervised machine learning
• Threat intelligence
• Security & compliance rules
Private cloud:
• Server Hosts
• Containers
Public cloud:
• Server Hosts
• Containers
• Accounts
and others
TLS-encryptedconnection
API integration
EASE OF DEPLOYMENT

17. 100100 000100 000 000500 000 000 0001
Detected
Risks &
Threats
Lacework Labs +
Intelligent Collection (+1.5 Trillion + 24Billion additional Daily)
• HoneyPot • API / Network Crawlers
• API / AWS/ GCP/ Azure • HASH / Net Info Workloads
Security Detection + Response
Forensics, Incident Handling, Customization : Enterprise UI, Query, and API’s

18. IaaS Configuration
Compliance
Cloud Server
Compliance
Runtime Threat
Detection &
Container Security
CUSTOMER USE CASES

19. Lacework’s Benefits for Security & DevOps
Security Teams
Automated Security
Eliminates repetitive, labor-intensive
work by completely automating threat
detection, workload security, and
compliance
Accurate & Actionable
Removes false positives and alert fatigue
by only delivering accurate, actionable
security alerts
Single Pane of Glass
Provides a single platform for multicloud
security and eliminates the need to
deploy multiple un-integrated security
products
DevOps
High velocity security
Builds security into the development
pipeline to ensure security operates at
the speed of DevOps
Built for modern
infrastructure
Naively built to support security and
threat detection for containers and
Kubernetes orchestration
Engineered for cloud scale
Designed to support very large cloud
deployments consisting of thousands of
server hosts and hundreds of accounts

20. “Lacework gave us the ability to monitor our thousands of AWS hosts, quickly detect
and assess threats across hosts and AWS services, and identify AWS configuration
compliance gaps, all without customized security rules.”
– ERIC KELSON, SENIOR SECURITY ENGINEER
“Within minutes of the attack occurring, Lacework was able to detect something that
other security tools were not. It outperformed everything we’ve been doing.”
– MARIO DUARTE, VP SECURITY
“As a Lacework customer we are excited to see their continued innovation in the area of
multi-cloud support and, in particular, deep integration with Kubernetes and GKE.”
– WILL GREGORIAN, CISO

21. FREE CLOUD RISK & THREAT ASSESSMENT
FREE Cloud Risk & Threat Assessment
Run a free 30-day Lacework deployment
Understand your cloud risk exposure
Detect threats & abnormal cloud behaviors
Get deep security visibility
Improve compliance & security posture
10-minute setup
lacework.com/free

22. CLOSE