Security in the cloud - making it a safe prospect

•Download as PPTX, PDF•

0 likes•568 views

The document discusses cloud security guidance and principles for understanding requirements, service offerings, data protection, separation of customers, governance, operations, personnel, development, supply chain management, identity and access management, interfaces, administration, auditing, and assurance. It directs the reader to a government website for more details on cloud security guidance.

Technology

© Crown Copyright. All rights reserved.
Chris Ulliott
Cloud Security
Technical Director and
Chief IAArchitect, CESG

this is
not new
© Crown Copyright. All rights reserved.

understand your
requirements
© Crown Copyright. All rights reserved.

value your
© Crown Copyright. All rights reserved.

principles
© Crown Copyright. All rights reserved.

data in transit
resilience
separation
governance
operational
personnel
dev supply chain
management
ID&A
interface protection
administration
audit
user responsibilities
© Crown Copyright. All rights reserved.

understand the
serviceoffering
© Crown Copyright. All rights reserved.

(I/P/S)aaS
© Crown Copyright. All rights reserved.

public
community
private or
© Crown Copyright. All rights reserved.

data in
transit
protection
© Crown Copyright. All rights reserved.

asset
protection
& resilience
© Crown Copyright. All rights reserved.

separation
between
customers
© Crown Copyright. All rights reserved.

governance
© Crown Copyright. All rights reserved.

operational
security
© Crown Copyright. All rights reserved.

personnel
security
© Crown Copyright. All rights reserved.

secure
development
© Crown Copyright. All rights reserved.

supply chain
security
© Crown Copyright. All rights reserved.

secure
consumer
management
© Crown Copyright. All rights reserved.

ID&A
© Crown Copyright. All rights reserved.

external
interface
protection
© Crown Copyright. All rights reserved.

secure
service
admin.
© Crown Copyright. All rights reserved.

audit
information
provision to
customers
© Crown Copyright. All rights reserved.

secure use
by the
consumer
© Crown Copyright. All rights reserved.

get
assurance
© Crown Copyright. All rights reserved.

assertion
© Crown Copyright. All rights reserved.

contractual
© Crown Copyright. All rights reserved.

independent
validation or
testing
© Crown Copyright. All rights reserved.

assurance
in the
design
© Crown Copyright. All rights reserved.

assured
components
© Crown Copyright. All rights reserved.

alternative
mitigations
© Crown Copyright. All rights reserved.

accept the residual
© Crown Copyright. All rights reserved.

get the details at:
https://www.gov.uk
/government
/collections
/cloud-security-guidance
© Crown Copyright. All rights reserved.

Questions
© Crown Copyright. All rights reserved.

ZASTI is an AI platform company that uses deep learning techniques to develop predictive models for aviation, healthcare, insurance, and surveillance. It was founded in 2017 by experienced entrepreneurs and is developing patents and predictive models for aircraft delays, component failure, property risk analysis, and other areas. ZASTI's platform can analyze both structured and unstructured data, is cloud-based or self-hosted, uses proprietary algorithms, and was accelerated by partnerships including with Airbus Bizlab.

Startup InsurTech Award - ZASTI

The Digital Insurer

ZASTI is an AI platform company that uses deep learning techniques to develop predictive models for aviation, healthcare, insurance, and surveillance. It was founded in 2017 by experienced entrepreneurs and is developing patents and predictive models for aircraft delays, component failure, property risk analysis, and other areas. ZASTI's platform can analyze both structured and unstructured data and was accelerated by Airbus Bizlab to develop predictive maintenance models. It has a team of data scientists and engineers with experience across multiple countries.

Powering Prosperity 29jan14 - Rick Huijbregts

Rick Huijbregts

Sec

3.com

The document discusses the need for new cybersecurity legislation. It notes that current cyber laws are insufficient to protect the nation. The agenda covers whether new legislation is necessary, what it should address, and what authorities and protections should be included. The briefing also discusses recent presidential policy directives related to critical infrastructure cybersecurity. It concludes that Visible products and services can help enhance research and development focus and technology outsourcing.

neXt Curve reThink: What Meltdown & Spectre Mean for IoT Past, Present & Future?

Leonard Lee

Citrix

Yansi Keim

Data driven-business

SAS Institute India Pvt. Ltd

Santosh Tiwari, Analytics Expert, SAS presented on the topic "Data Driven Business" at IDG CIO Summit 8-9 Feb 2018, in which he talked about modern, open platform Viya built for analytics innovation, and shared a vision on how the future of analytics looks like. During this session, he also emphasized on Artificial Intelligence & Machine Learning to build automated agile analytics platforms for customer engagement and business decisions.

ZASTI is an AI platform company that uses deep learning techniques to develop predictive models for aviation, healthcare, insurance, and surveillance. It was founded in 2017 by experienced entrepreneurs and is developing patents and predictive models for aircraft delays, component failure, property risk analysis, and other areas. ZASTI's platform can analyze both structured and unstructured data and was accelerated by Airbus Bizlab to develop predictive maintenance models. It has a team of data scientists and engineers with experience across multiple countries.

Powering Prosperity 29jan14 - Rick Huijbregts

Rick Huijbregts

Sec

3.com

neXt Curve reThink: What Meltdown & Spectre Mean for IoT Past, Present & Future?

Leonard Lee

Citrix

Yansi Keim

Data driven-business

SAS Institute India Pvt. Ltd

B4 the identity of things-securing the internet of everything

Dr. Wilfred Lin (Ph.D.)

The document discusses identity and access management challenges posed by emerging technologies like mobile, cloud, social media, and the Internet of Things. It outlines Oracle's identity management platform approach, which aims to simplify deployment and management across devices through a single platform with converged governance, authentication, authorization, and device management capabilities. The platform is designed to scale from thousands to billions of users and devices to address the growing challenges of securing identities in an increasingly connected world.

Identityofthings amitjasuj av10

OracleIDM

The document discusses the future of identity and security management as the number of connected devices increases dramatically. It notes that by 2020 there will be many more devices than can currently be predicted, across all industries. This will redefine concepts of identity and trust between people and devices. New security requirements will emerge to handle the massive scale of authentication, authorization, and dynamic user volumes across devices, appliances, and sensors. Oracle's identity management platform aims to provide a single solution to address these new challenges as the Internet of Things continues to grow.

Identityofthings amitjasuj av10

OracleIDM

The document discusses the growing number of connected devices and the need for identity management solutions. It outlines Oracle's identity management platform and its ability to handle authentication, authorization, and management at massive scale across various devices. The platform provides a single solution for securing all devices and addresses new security requirements as interactions between people, devices, and applications increase.

Conf2013 bchristensen thebig_t

Beau Christensen

The document discusses Ping Identity's approach to monitoring and building trust with customers. It emphasizes reliability through keeping systems running with automation, security, and tools. It also stresses transparency by publicly discussing decisions, architecture, and status updates. Ping Identity uses a monitoring stack with multiple tools at different layers, with Splunk as the central aggregation and visualization tool. This allows them to monitor networks, systems, applications, security, and more to quickly troubleshoot issues and maintain reliability and transparency.

Firewall Webinar

AT&T

The document discusses establishing effective cybersecurity by securing a network's perimeter. It notes that 62% of organizations acknowledged a data breach in 2015 and that the average cost of a breach in the US is now $7 million. The solution proposed is a multi-layered cybersecurity program with firewalls providing a foundation of perimeter defense. Firewalls can be network-based, web application-based, cloud-based, or premises-based, each with their own advantages for monitoring and controlling incoming and outgoing network traffic.

Implementing Governance as Code

Amazon Web Services

Traditionally, technology governance has required long, detailed documents and hours of work for IT managers, security or audit professionals, and administrators. Automating governance on AWS offers a better way. AWS services modernize technology governance by enshrining policy into code and embedding security guardrails at the development level, to provide reliable policy implementation and allow for continuous and real-time auditing capabilities. Leave this session with a better understanding of the benefits of automating technology governance and managing security and compliance with AWS. Presenter: John McDonald, Financial Services Compliance Specialist, AWS

Are your Cloud Services Secure and Compliant today?

Sridhar Karnam

The cyber threat landscape is evolving faster than security teams can manage without dramatically increasing headcount. As IT organizations seek to achieve new levels of IT efficiency and value for the hybrid cloud, both security and compliance headaches increase in severity as well. See how HP is delivering advanced, data-driven security technologies designed to empower security operations to run more efficiently for the Hybrid Cloud. Register for this webinar to learn how you can benefit from a new style of IT through the combined wealth of information assimilated from multiple sources to provide you valuable insights that impact your business. In addition you will learn how you can enjoy the use of secure compliant cloud services, that can be consolidated in one view and automated to the click of a button.

The Art of Cloud Auditing - ISACA ID

Eryk Budi Pratama

Presented at ISACA Indonesia Monthly Technical Meeting, 11 Dec 2019 at Telkom Landmark. Key takeaways from my presentation: 1. Cloud customers have to understand the share responsibilities between customer and cloud provider 2. Different cloud service model (IaaS, PaaS, SaaS) has different audit methodology 3. Customer’s IT Auditor have to be trained to have the skills needed to audit the cloud service 4. Understanding IAM in Cloud is very important. Each Cloud Service Provider has different IAM mechanism 5. Understanding different type of audit logs in cloud platform is important for IT Auditor

Innovation and the Internet of Things - Emeka Nwafor (Wind River Systems)

IoT613

INNOVATION AND THE INTERNET OF THINGS IoT is shaping up to be one of the most disruptive and transformative industrial technology events in history. Analysts predict that by 2020, the data coming from tens of billions of devices will drive trillions of dollars in to the economy from new business models that make cities smarter, factories more efficient, and improve society’s overall quality of life. In this session we will take a look at how operational analytics, security concerns, and the user experience are impacting innovation around the Internet of Things. ABOUT EMEKA Emeka is the Senior Director for Global Alliances at Wind River, an independent subsidiary of Intel Corp. Emeka is responsible for managing Wind River’s global ecosystem of software partners, aligning them with Wind River’s go-to-market strategy for the Internet of Things and the Wind Helix product portfolio. Emeka has over 20 years of experience developing complex embedded systems and developing tools to support the development of complex embedded systems. A graduate of McGill University, Emeka enjoys cycling, running, playing tennis, jazz, travel, good food, and cheering on his daughters during their soccer matches.

Cloud is all the buzz...what is it really?!?!

Michael Maharas

Cloud Services As An Enabler: The Strategic, Legal & Pragmatic Approach

SLA-Ready Network

Cloud Services As An Enabler

SLA-Ready Network

Precise, Predictive, and Connected: DDS and OPC UA – Real-Time Connectivity A...

Real-Time Innovations (RTI)

2016 01-05 csr css non-confidential slide deck

Richard (Dick) Kaufman

Engineered Systems - nejlepší cesta, jak zabezpečit váš dataAccelerate Cloud

MarketingArrowECS_CZ

This document discusses security features of Oracle's engineered systems that provide secure multi-tenant isolation for cloud deployments. Key security techniques discussed include encryption of data in transit and at rest, secure memory technology, virtualization security through Solaris zones, network segmentation, role-based access controls, and database security features. The goal is to provide each tenant an illusion of a dedicated system through comprehensive security measures at every layer from compute and storage to network and database.

Ten Things You Should not Forget in Mainframe Security

CA Technologies

Given the current state of security and breaches in the news every day, you won’t want to miss this session. We will cover the top 10 areas that you should be reviewing as a security practitioner that most organizations overlook. With the knowledge taken from this session, you will be able to better educate your staff and auditors about how to take security to the next level for your business and protect z/OS®. For more information, please visit http://cainc.to/Nv2VOe

Smart & Safer Cities by Richard Knight

International Turneky Systems

The document discusses the emergence of smart cities and the need for smart city platforms. It describes how smart city platforms can enable data-driven decision making, support growth through scalable architectures, and accelerate innovation. The platforms aim to promote transparency, trust and collaboration through open data sharing. The document provides examples of potential smart city use cases around traffic management and resource optimization. It also outlines attributes of an effective smart city platform including being open, agile, secure and able to support a city's entire portfolio through a software-defined approach.

2022-Q3-Webinar-PPT-DataProtectionByDesign.pdf

ControlCase

This webinar discussed data protection by design and the Multi-cert approach to compliance. It defined data protection by design as an approach that considers data protection requirements at the design phase and throughout the lifecycle of any system. The Multi-cert approach recognizes that many organizations must comply with multiple certifications and regulations, and integrating these helps provide comprehensive data protection. Common challenges with the Multi-cert approach include redundant efforts and cost inefficiencies. ControlCase's One Audit solution aims to help organizations assess once and comply to many certifications by automating evidence collection and integrating compliance activities.

Diamond offshore drilling transforms control infrastructure from target to ce...

IntelligentManufacturingInstitute

Modern industrial security attacks are growing in volume and sophistication, often targeting systems control infrastructure. A single attack can cost millions of dollars for offshore drilling services like Diamond Offshore Drilling. Through Rockwell Automation® Asset Centre and Cisco’s Threat Detection Services, the company now has systems in place to help detect and respond to security threats, and expedite the recovery process for critical infrastructure.

Oracle Cloud Café IoT 12-APR-2016

Jean-Marc Hui Bon Hoa

Phase two of OpenAthens SP evolution including OpenID connect option

Security in the cloud - making it a safe prospect

Recommended

Recommended

More Related Content

Similar to Security in the cloud - making it a safe prospect

Similar to Security in the cloud - making it a safe prospect (20)

More from Eduserv

More from Eduserv (20)

Recently uploaded

Recently uploaded (20)

Security in the cloud - making it a safe prospect