Alle afleveringen
365 afleveringen, van nieuw naar oud
-
Azure Security Best Practices for Cloud Architects - John Savill
21 maart 2021 · 58 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with John Savill (Linkedin_John Savill) is the Principal Cloud Architect, Author and YouTuber. Lees meer
Host: Ashish Rajan - Twitter @hashishrajan
Guest: John Savill (Linkedin_John Savill)
In this episode, John & Ashish spoke about
How is security different between Cloud Security vs On-Prem Security?
How does one track API/User Activity across Azure implementation?
What are some of the security products in Azure that are good practices for anyone starting today?
So what log must be collected to ensure all API events are collected?
What are the best security practice for Identity and Networking in Azure?
What Security Frameworks for Azure like CIS exist for Azure?
How would Monitoring and Incident Response work in an Azure Deployment ?
What are examples of Azure Security Maturity Levels?
Creating Content for the technology space, where does one start?
And much more…
ShowNotes and Episode Transcript on www.cloudsecuritypodcast.tv
Twitter - @kaizenteq @hashishrajan
If you want to watch videos of this and previous episodes:
- Youtube Channel: https://lnkd.in/gUHqSai
-
WHAT IS INFRASTRUCTURE AS CODE SECURITY? - Barak Schoster
14 maart 2021 · 39 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Barak Schoster Goihman (@barakschoster) is the Co-Founder and CTO of Bridgecrew (@Bridgecrewio). Lees meer
Host: Ashish Rajan - Twitter @hashishrajan
Guest: Barak Schoster Goihman @barakschoster
In this episode, Barak & Ashish spoke about
What is Infrastructure as Code Security
Application Security vs Infrastructure as Code Security - are they same?
What is DevSecOps?
Where should one start? Ansible? Terraform? Kubernetes? Saltstack?
Configuration and Policy as Code - What are these?
How to get started on Infrastructure Security?
Open source vs Paid product, what should one consider before going down either path?
The future of Infrastructure as Code Security?
Difference between a DSL and a general purpose programming language?
Becoming a successful startup founder as a developer, what are some tips you can share for future startup founders?
And much more…
ShowNotes and Episode Transcript on www.cloudsecuritypodcast.tv
Twitter - @kaizenteq @hashishrajan
If you want to watch videos of this and previous episodes:
- Youtube Channel: https://lnkd.in/gUHqSai
-
INCIDENT RESPONSE IN AWS CLOUD
7 maart 2021 · 46 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Toni de la Fuente (@toniblyx) is the Senior Security Consultant at AWS (@AWSCloud) and author of Prowler - AWS Security Tool. Lees meer
Host: Ashish Rajan - Twitter @hashishrajan
Guest: Toni de la Fuente @toniblyx
In this episode, Toni & Ashish spoke about
What is Cloud Security Assessment?
The story behind the creation of Prowler and what Prowler does?
How is Prowler different to CIS benchmark?
How to set up an effective incident response plan?
How to respond to forensic collection evidence?
And much more…
ShowNotes and Episode Transcript on www.cloudsecuritypodcast.tv
Twitter - @kaizenteq @hashishrajan
If you want to watch videos of this and previous episodes:
- Twitch Channel: https://lnkd.in/gxhFrqw
- Youtube Channel: https://lnkd.in/gUHqSai
-
How to become a CLOUD SECURITY ENGINEER IN 2021?
28 februari 2021 · 48 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Nicholas McLaren (Linkedin - nmclarencys) is the Cloud Security Engineer, ByteChek(@Bytechek). Lees meer
Host: Ashish Rajan - Twitter @hashishrajan
Guest: Nicholas McLaren (Linkedin - nmclarencys
In this episode, Nick & Ashish spoke about
What qualifications do you need to become a cloud security engineer? Degrees, certifications etc
How to network effective to secure your 1st cloud security role?
Network in the world of Covid-19.
A day in the life of a Cloud Security Engineer
Soft skills required by Cloud Security Engineers
How to get recruiters and hiring managers to notice you?
And much more…
ShowNotes and Episode Transcript on www.cloudsecuritypodcast.tv
Twitter - @kaizenteq @hashishrajan
If you want to watch videos of this and previous episodes:
- Twitch Channel: https://lnkd.in/gxhFrqw
- Youtube Channel: https://lnkd.in/gUHqSai
-
Kubernetes Security at Scale in A CI/CD Pipeline - Michael Fraser
21 februari 2021 · 56 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Michael Fraser (@itascode) is the Chief Architect, Co-Founder at refactr (@RefactrIT). Lees meer
Host: Ashish Rajan - Twitter @hashishrajan
Guest: Michael Fraser - @itascode
In this episode, Michael & Ashish spoke about
What is DevSecOps?
What is Kubernetes?
Why would you use Kubernetes?
What should a Kubernetes Deployment look like when done right from a security perspective?
The building blocks of making Kubernetes part of your CICD pipeline.
Benchmarks to use to measure maturity of organisations
And much more…
ShowNotes and Episode Transcript on www.cloudsecuritypodcast.tv
Twitter - @kaizenteq @hashishrajan
If you want to watch videos of this and previous episodes:
- Twitch Channel: https://lnkd.in/gxhFrqw
- Youtube Channel: https://lnkd.in/gUHqSai
-
Container Security in AWS at Scale - Ben Tomhave
14 februari 2021 · 53 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Ben Tomhave (Linkedin - @btomhave) is the Principal, Falcon’s View Consulting (@FalconsView). Lees meer
Host: Ashish Rajan - Twitter @hashishrajan
Guest: Ben Tomhave (Linkedin - @btomhave)
In this episode, Ben & Ashish spoke about
What are Containers?
What is Container Security/ Kubernetes Security for people from traditional security background?
What should a Container Deployment look like?
7 Security Challenges for introducing Containers into an organization, where to get started?
Building Blocks for building Container Security at Scale - the right way.
Software Composition Analysis for Containers
Security challenges with Containers & Serverless
What was NOC and SOC and does Cloud knowledge really matter for that role?
How to create awareness about container security in traditional computer security team?
And much more…
ShowNotes and Episode Transcript on www.cloudsecuritypodcast.tv
Twitter - @kaizenteq @hashishrajan
If you want to watch videos of this and previous episodes:
- Twitch Channel: https://lnkd.in/gxhFrqw
- Youtube Channel: https://lnkd.in/gUHqSai
-
CISO Challenges in 2021 - Zane Lackey Signal Sciences, Fastly
10 februari 2021 · 52 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Zane Lackey, CISO & Co-Founder Signal Sciences, which is now owned by Fastly. Lees meer
Host: Ashish Rajan - Twitter @hashishrajan
Guest: Zane Lackey - Linkedin
In this episode, Zane & Ashish spoke about
What was your path to your current CyberSecurity Role?
DevOps movement between East Coast and West Coast in 2010 - Etsy (Biggie) & Netflix (2Pac)
Was the change to 30 production deployments a day, good thing for security?
What was action plan as a CISO to tackle 30 deployments a day?
Has the viewpoint on Security and thing that kept CISO awake at night changed due to Pandemic?
Post Pandemic CISOs have 100s of single pane of glass
Scale is the problem that is facing every security team.
And much more…
ShowNotes and Episode Transcript on www.cloudsecuritypodcast.tv
Twitter - @kaizenteq @hashishrajan
If you want to watch videos of this and previous episodes:
- Twitch Channel: https://lnkd.in/gxhFrqw
- Youtube Channel: https://lnkd.in/gUHqSai
-
Cloud Security in $25 Billion dollar Company - Siemens USA
7 februari 2021 · 55 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Kurt John, Chief CyberSecurity Officer CISO at Siemens USA Lees meer
Host: Ashish Rajan - Twitter @hashishrajan
Guest: Kurt John - Linkedin
In this episode, Kurt & Ashish spoke about
Cloud Security in a Large Organisation and the challenges that come with it.
Cloud and Cloud Security in the Operation Technology World
How Product Security and Enterprise Security is approached?
The impact of Covid-19 on cloud transformation.
Impact of Edge Technology and 5G.
How beginners can expose themselves to OT security?
What happens in the world of OT and SCADA to help businesses with cyber readiness?
Should security be turn on by default?
Charter of Trust
Whats next for SCADA (Supervisory Control and Data Acquisition)?
And much more…
ShowNotes and Episode Transcript on www.cloudsecuritypodcast.tv
Twitter - @kaizenteq @hashishrajan
If you want to watch videos of this and previous episodes:
- Twitch Channel: https://lnkd.in/gxhFrqw
- Youtube Channel: https://lnkd.in/gUHqSai
-
Security Chaos Engineering Experiments for Beginners
31 januari 2021 · 35 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with David Lavezzo, Director of Security Chaos Engineering at Capital One Lees meer
Host: Ashish Rajan - Twitter @hashishrajan
Guest: David Lavezzo - Linkedin
In this episode, David & Ashish spoke about
What is security chaos experiments and how does it compare to chaos engineering?
The Golden Age of Offence?
Tools for Chaos Experiments
How to get started in Security Chaos Experiments?
Is Security Chaos Experiments only for large companies?
Security Chaos Experiments in Production
How to get organisation buy in for Security Chaos Experiments?
What is gap hunting?
Security Chaos Engineering at Scale and what metrics can be used to measure its maturity?
The upcoming trends of Security Chaos Engineering
And much more…
ShowNotes and Episode Transcript on www.cloudsecuritypodcast.tv
Twitter - @kaizenteq @hashishrajan
If you want to watch videos of this and previous episodes:
- Twitch Channel: https://lnkd.in/gxhFrqw
- Youtube Channel: https://lnkd.in/gUHqSai
-
RED TEAM IN CLOUD - Brianna Malcolmson, Atlassian
24 januari 2021 · 47 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Brianna Malcolmson, Security Engineering Manager, Atlassian Lees meer
Host: Ashish Rajan - Twitter @hashishrajan
Guest: Brianna Malcolmson - Linkedin @briannajoy
In this episode, Brianna & Ashish spoke about
What is Cloud Security Testing and Assessment ?
What is a Cyber Kill Chain in a cloud context?
How to get started in Cloud Pentesting?
The need for Cloud Certification and recommendations for Beginners?
Is there something people are not talking enough about in a Cloud Security context?
And much more…
ShowNotes and Episode Transcript on www.cloudsecuritypodcast.tv
Twitter - @kaizenteq @hashishrajan
If you want to watch videos of this and previous episodes:
- Twitch Channel: https://lnkd.in/gxhFrqw
- Youtube Channel: https://lnkd.in/gUHqSai
-
INFRASTRUCTURE AS CODE SECURITY
17 januari 2021 · 50 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Matt Johnson, Developer Advocate Lead, Bridgecrew. Lees meer
Host: Ashish Rajan - Twitter @hashishrajan
Guest: Matt Johnson - Twitter @metahertz
In this episode, Matt & Ashish spoke about
What was Matt’s path into Developer Advocate role?
What does Cloud Security mean to Matt?
What is Infrastructure as Code and Infrastructure Code Security ?
Are developers or security teams doing more infrastructure as a code security?
What is develop first cloud security?
Thoughts on static code and run time analysis?
It is a requirements to know Yaml, Python or Json for Cloud Networking?
What kind of specific training is recommended for developers who are new to IAC?
What open source codes are good resources?
Where can people start with infrastructure as security
Can people without a security background still take advantage of the open source security tools?
How to get started in the open source space?
ShowNotes and Episode Transcript on www.cloudsecuritypodcast.tv
Twitter - @kaizenteq @hashishrajan
If you want to watch videos of this and previous episodes:
- Twitch Channel: https://lnkd.in/gxhFrqw
- Youtube Channel: https://lnkd.in/gUHqSai
-
Cloud Security Testing in AWS
10 januari 2021 · 53 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Pawel Rzepa, Snr Security Consultant, SecuRing. Lees meer
Host: Ashish Rajan - Twitter @hashishrajan
Guest: Pawel Rzepa - Twitter @rzepsky
In this episode, Pawel & Ashish spoke about
What was Pawel’s path into Cybersecurity?
What does Cloud Security mean to Pawel?
What is Cloud Security Testing and Assessment ?
What is a Cyber Kill Chain in a cloud context?
What is threat hunting in cloud security assessments?
What permissions are required for pentesting in AWS?
How does on-premise pentesting translate into cloud?
Different tools that can assist with cloud security pentesting.
How does hybrid cloud affect the scope of pentester assessments?
How to stay on top of your cloud security assessment?
The future of cloud security assessment.
How github and AWS collaborate to prevent AWS access keys misuse?
What are some of the new kind of attacks in cloud?
How to get started in cloud pentesting?
The need for cloud certification and recommendations for beginners
Is there something people are not talking enough about in a cloud security context?
ShowNotes and Episode Transcript on www.cloudsecuritypodcast.tv
Twitter - @kaizenteq @hashishrajan
If you want to watch videos of this and previous episodes:
- Twitch Channel: https://lnkd.in/gxhFrqw
- Youtube Channel: https://lnkd.in/gUHqSai
-
HOW TO BECOME A CLOUD SECURITY ARCHITECT in 2021 ? - Sriya Potham
3 januari 2021 · 44 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Sriya Potham, Principal Cloud Security Architect Lees meer
Host: Ashish Rajan - Twitter @hashishrajan
Guest: Sriya Potham - Linkedin @sriya
In this episode, Sriya & Ashish spoke about
What was your path into Cybersecurity?
Whats your definition of Cloud Security?
What is the shared responsibility model?
Whats a day in the life of a Cloud Security Architect ?
Are cloud architecture reviews different in different industries?
As a Cloud Security Architect do you need to focus on the GRC side?
Are CCM controls used quite often?
What soft and technical skills for you require to be successful as a Cloud Security Architect?
Is Cloud Security Architect a technical role?
Are certificates important to secure a Cloud Security Architecture role?
Does one need to consider doing CCSP?
Is architecture different when working with multi-cloud? Is it necessary to know both AWS and Azure?
What comes after certification ?
Do you need to be technical and have an operational understanding of the controls to give guidance?
Are some cloud service provider services not mature enough to be be used in organisations?
How do you transition from on premise security architect to cloud security architect?
How you get started if you have had no experience in Cloud?
Is it better to be experienced in different industries or be specialised in one as a Cloud Security Architect?
The difference between Cloud Security Architect and DevSecOps Architect? Can a person be both?
Is it valuable to do Comptia Security + ?
Is there a myth in cloud security that you hear often?
What are people not talking enough about in Cloud Security ?
ShowNotes and Episode Transcript on www.cloudsecuritypodcast.tv
Twitter - @kaizenteq @hashishrajan
If you want to watch videos of this and previous episodes:
- Twitch Channel: https://lnkd.in/gxhFrqw
- Youtube Channel: https://lnkd.in/gUHqSai
-
STARTING A SUCCESSFUL CYBERSECURITY PODCAST IN 2021
20 december 2020 · 1 uur 3 min
In this Christmas special episode of the Virtual Coffee with Ashish edition, we had a panel of successful CyberSecurity Podcast Hosts that answered questions about starting and running a successful CyberSecurity Podcast. Lees meer
Panel Participants:
Host: Ashish Rajan - Twitter @hashishrajan, Host of Cloud Security Podcast
Guest 1: Chris Cochran - Linkedin chriscochrancyber ,Podcast co-Host, Hacker Valley Studio
Guest 2: James J Azar - Linkedin James-j-azar, Podcast host, The CyberHub Podcast
In this episode, Ashish & Panelist spoke about
The Journey - A bit about your podcast, how you got started?
Thoughts on finding podcast niche?
How do you find you “Voice”?
Thoughts on audio vs video podcast format?
The moments that make you most proud about your podcast?
What does it take to start a podcast? 1st few things to consider?
How to find podcast guests? Specially as a beginner?
What are the big challenges of running a podcast?
What is a Big NO in the world of podcasting for you
ShowNotes and Episode Transcript on www.cloudsecuritypodcast.tv
Twitter - @kaizenteq @hashishrajan
If you want to watch videos of this and previous episodes:
- Youtube Channel: https://lnkd.in/gUHqSai
- Twitch Channel: https://lnkd.in/gxhFrqw
-
RISK MANAGEMENT IN CLOUD SECURITY - MONICA VERMA
29 november 2020 · 48 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Monica Verma, CISO Lees meer
Host: Ashish Rajan - Twitter @hashishrajan
Guest: Monica Verma - Linkedin @monicaverma
In this episode, Monica & Ashish spoke about
What was your path into Cybersecurity?
What does Cloud Security mean for you?
How do you explain risk management to people?
Can an organisation be risk free?
Are there any obvious risk management considerations and challenges people should consider?
What are some of the building blocks of risk management that people can start with?
Which risk assessment strategy would you suggest for a new business?
How has insider risk evolved with cloud?
What are the top 10 risks in cloud security?
Is there a security strategy roadmap for cloud security business leaders?
Should cyber-resilience be the goal for an organisational security roadmap?
Cyber secure vs cyber resilience, whats more important?
What are the misconceptions about cloud that haven’t been de-mystified yet?
Is it better from a risk standpoint to stick to one cloud vendor?
ShowNotes and Episode Transcript on www.cloudsecuritypodcast.tv
Twitter - @kaizenteq @hashishrajan
If you want to watch videos of this and previous episodes:
- Twitch Channel: https://lnkd.in/gxhFrqw
- Youtube Channel: https://lnkd.in/gUHqSai
-
WHAT IS DIGITAL RISK PROTECTION & WHY IS IT IMPORTANT? - Sam Small, Zerofox
22 november 2020 · 55 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Sam Small, Chief Security Officer, Zerofox Lees meer
Host: Ashish Rajan - Twitter @hashishrajan
Guest: Sam Small - Linkedin @samsmallphd
In this episode, Sam & Ashish spoke about
What was your path into your current role?
What are Digital Risk and Digital Threats?
How do you identify Digital Risk? what are the broad categories?
How is Digital Risk different at an organisation level?
Is Digital Risk Protection the same as Cyber Threat intelligence?
What risks does Digital Risk Protection (DRP) protect organisations against?
What can organisations do as part of Digital Risk Protection (DRP) apart from seeking legal actions?
Is there an overlap between social engineering and digital risk protection?
Are digital risk threats on the rise?
How do we respond to attacks where social media is being social engineered?
How do you assess the maturity of DRP in an organisation?
ShowNotes and Episode Transcript on www.cloudsecuritypodcast.tv
Twitter - @kaizenteq @hashishrajan
If you want to watch videos of this and previous episodes:
- Twitch Channel: https://lnkd.in/gxhFrqw
- Youtube Channel: https://lnkd.in/gUHqSai
-
OPEN SOURCE AWS SECURITY - MATTHEW FULLER, co-Founder CloudSploit, Aqua
15 november 2020 · 47 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Matthew Fuller, co-Founder CloudSploit, Aqua Lees meer
Host: Ashish Rajan - Twitter @hashishrajan
Guest: Matthew Fuller - Linkedin @mattdfuller
In this episode, Matthew & Ashish spoke about
What was your path into your current role? What was the inspiration behind CloudSpoilt?
What does Cloud Security mean for you?
What are your thoughts for organisations navigating the dilemma of buy first vs build first?
What is Open Source?
Open Source, what is the community driven model here?
What is a role of a cloud security engineer?
What are the absolute foundational challenges with Open Source?
Is experience with Linux beneficial if you are going Open Source?
Do the challenges change with hybridcloud, multicloud, polycloud etc?
How were you away to stay away from the VCs and basically boot strap
What are some of the considerations when choosing between open source and a vendor product?
What are the challenges or the bad with Open Source?
How do you assess the maturity of security of an environment?
Are there cloud security myths that you want to debunk?
Whats your advice to people who want to dabble in Open Source?
Is there something that isn’t being talked enough about in the Cloud Security Space?
As the cloud becomes more featured the amount of complexity and securing the cloud grows, even tools that help you with security require a lot more learning. Any comments on this statement?
ShowNotes and Episode Transcript on www.cloudsecuritypodcast.tv
Twitter - @kaizenteq @hashishrajan
If you want to watch videos of this and previous episodes:
- Twitch Channel: https://lnkd.in/gxhFrqw
- Youtube Channel: https://lnkd.in/gUHqSai
-
WHAT THE HECK IS CI/CD | Continuous Integration | Delivery | Deployment - Melissa Benua
8 november 2020 · 43 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Melissa Benua, Director of Engineering Lees meer
Host: Ashish Rajan - Twitter @hashishrajan
Guest: Melissa Benua - Linkedin @mbenua
In this episode, Melissa & Ashish spoke about
What was your path into the Engineering Manager role?
What does Cloud Security mean for you?
For those people listening what are some of the foundational Modern Delivery methods - CI/CD, Trunkline deployments etc
What roles does security can play in such environments?
What does a super mature model of CI/CD look like?
What are some of the recommendations for the building blocks? Is continuous monitoring part of CI/CD security
Can you do CI/CD without knowing how to code?
Is there any role that Cloud plays in enabling this - Cloud Native services vs using other open source options?
What is the difference between Github vs GitLab?
What are the Challenges for development/security - when transitioning from deploying 6 months to multiple deployments a day - quality, speed, Reliability, repeatability during this process
What is SDLC?
What does CI/CD work at scale?
What does Nirvana looks like for a Mature SDLC?
How do you measure CI/CD maturity?
ShowNotes and Episode Transcript on www.cloudsecuritypodcast.tv
Twitter - @kaizenteq @hashishrajan
If you want to watch videos of this and previous episodes:
- Twitch Channel: https://lnkd.in/gxhFrqw
- Youtube Channel: https://lnkd.in/gUHqSai
-
HOW TO PREPARE FOR GDPR IN AZURE CLOUD ENVIRONMENT- Naomi Buckwalter
1 november 2020 · 46 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Naomi Buckwalter Lees meer
Host: Ashish Rajan - Twitter @hashishrajan
Guest: Naomi Buckwalter - Linkedin @naomi-buckwalter
In this episode, Naomi & Ashish spoke about
What was your path into CyberSecurity?
What does Cloud Security mean for you?
What is GDPR? Privacy vs Security?
How do we define processing data for purposes of GDPR?
At what point GDPR become a legal thing vs a security thing?
Does an AU company with data is in the EU need to comply with GDPR?
Is GDPR in Cloud different?
What are the potential landmines that most of us are not aware of? How do small to mid-size business deal with the overhead of being a GDPR compliant?
Where do small to medium businesses start with GDPR?
Is GDPR like a regular audit?
What is a sub processor?
What legal representation do you need for GDPR?
How to implement GDPR in Azure? Any particular Azure services that you recommend for GDPR compliance?
Can you request for your specific data to be deleted from a company as part of GDPR?
What are the GDPR challenges for large enterprise? Is there a disconnect between legal and the data protection officer?
What is the intention behind GDPR?
Do startups have to worry about GDPR?
What part of EU citizen data is sensitive ?
Can GDPR be automated?
What are some things companies need to do in order to comply with the GDPR?
How about in the cloud? Are there specific things cloud-based companies must do to comply with the GDPR?
ShowNotes and Episode Transcript on www.cloudsecuritypodcast.tv
Twitter - @kaizenteq @hashishrajan
If you want to watch videos of this and previous episodes:
- Twitch Channel: https://lnkd.in/gxhFrqw
- Youtube Channel: https://lnkd.in/gUHqSai
-
HOW TO START in BUG BOUNTY IN 2020 with Casey Ellis, BugCrowd
25 oktober 2020 · 1 uur 6 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Casey Ellis Lees meer
Host: Ashish Rajan - Twitter @hashishrajan
Guest: Casey Ellis - Linkedin @caseyjohnellis
In this episode, Casey & Ashish spoke about
What was your path into CyberSecurity
.What does Cloud Security mean for you?
CrowdSource security as a service model & Bug Bounty, can you tell the audience about this space?
How do you make people feel comfortable with the concept of crowdsource security?
Is bug bounty only for big companies?
How do you make sure you are not painting a big bulls eye on your back through crowdsource security?
Basic things people can start with - security.txt, responsible disclosure?
How can people get into the Bug Bounty Space? Can anyone get into it?
How do we fix the ostrich head in the sane mentally of less mature organisations?
How can we foster a safer environment to talk about Bug Bounty openly?
When Bug Bounty goes wrong?
How do economics and game theory play into the crowdsourcing bug bounty scene? Do researchers look for other outlets? How do companies find the sweet spot of payments?
Is it better to disclose a bug to a third party or the actual company?
ShowNotes and Episode Transcript on www.cloudsecuritypodcast.tv
Twitter - @kaizenteq @hashishrajan
If you want to watch videos of this and previous episodes:
- Twitch Channel: https://lnkd.in/gxhFrqw
- Youtube Channel: https://lnkd.in/gUHqSai
-
CONTINUOUS MONITORING FOR CONTROLS & VULNERABILITIES - DANIEL MIESSLER
18 oktober 2020 · 49 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Daniel Miessler Lees meer
Host: Ashish Rajan - Twitter @hashishrajan
Guest: Daniel Miessler - Linkedin @danielmiessler
In this episode, Daniel & Ashish spoke about
What was your path into CyberSecurity
Continuous Monitoring(CM) or Continuous Auditing - is that the same thing for you?
CI/CD, one would assume CM is obvious, or is CM more of a mature organisation thing?
At what point, should an organisation consider Continuous Monitoring? Do smaller organisations need to think about it as well?
What is BugBounty?
How do we find more about BugBounty resources for continuous monitoring?
Are you using Python for automation?
How to manage risk around Bounty program?
What suggestions do you have for continuous monitoring in a multi cloud environment?
Have you added any machine learning algorithms to your methodology or KO moves?
How can one start with automation when looking for vulnerability Continuously
How do you scale inventory for resources?
Can you use it to find fake phishing websites?
Custom code vs product for continuous monitoring?
Is there alert fatigue in continuous monitoring?
Why is it important to do continuous monitoring?
Does everyone in tech or in general need to have a personal brand? Tips for Personal Branding for audience that enjoys blogging or podcasting?
ShowNotes and Episode Transcript on www.cloudsecuritypodcast.tv
Twitter - @kaizenteq @hashishrajan
If you want to watch videos of this and previous episodes:
- Twitch Channel: https://lnkd.in/gxhFrqw
- Youtube Channel: https://lnkd.in/gUHqSai
-
AWS SECURITY IN A LARGE REGULATED ENTERPRISE! - HOUSTON HOPKINS, CAPITAL ONE
11 oktober 2020 · 1 uur 2 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Houston Hopkins, Director CyberSecurity, Capital One Lees meer
Host: Ashish Rajan - Twitter @hashishrajan
Guest: Houston Hopkins - Linkedin @houstonhopkins
In this episode, Houston & Ashish spoke about
What was your path into CyberSecurity?
How Capital one pioneered as bank moving into AWS Cloud?
What immediate security challenges does Cloud Security in a Hybrid world look like, without going into tools.
Do you prefer to use AWS native tools for security observability or a vendor product?
What are some of the Security challenges to solve when looking at a large cloud landscape? (threat detection at scale, continuous compliance etc)
Is accountability a challenge for Cloud at Scale?
Does this change quite a bit for security in one cloud compared to another? (resources that know multiple cloud etc)
Which approach do you recommend - Standardizing security vs Operationalize and Manage with more staff for effective security across multi-cloud environments?
Immediate challenges around multi-cloud - Maintaining visibility of assets and secure configurations in a large multi-cloud environment
What does detection and prevention look like in a cloud landscape?
How do you keep track of all the AWS services?
What security controls across compute heavy vs serverless vs containers in a multi-cloud world
How do you get visibility in the current poly-cloud or multi-cloud world?
ShowNotes and Episode Transcript on www.cloudsecuritypodcast.tv
Twitter - @kaizenteq @hashishrajan
If you want to watch videos of this and previous episodes:
- Twitch Channel: https://lnkd.in/gxhFrqw
- Youtube Channel: https://lnkd.in/gUHqSai
-
CISO Challenges in Cloud Security - Caleb Sima, VP - Security at Databricks
4 oktober 2020 · 1 uur 7 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Caleb Sima, VP - Security, Databricks Lees meer
Host: Ashish Rajan - Twitter @hashishrajan
Guest: Caleb Sima - Linkedin @CalebSima
In this episode, Caleb & Ashish spoke about
What was your path into CyberSecurity?
Bulletin Board vs IRC
What is Cloud Security?
Are security challenges harder or difficult between Enterprise vs Cloud built companies?
What are the challenges for migrating from on-premise to cloud?
What are your thoughts on IAM, Roles & VPCs?
How many different tools did you need for visibility of vulnerabilities when moving to cloud?
Should organisation’s look at Cloud Service Providers outside of Azure, AWS, GCP e.g Digital Ocean, OpenShift.
How important is security culture and how do you see it be part of the success of an organisation?
Has the view point changed since the last time you wrote the Do’s,Don’t & Myths of Startups
Do you feel industry is adopting preferring more managed security services vs self customization
For someone who is starting into CyberSecurity and would like to get to your role, what kind of skill set should they be focussing on?
What about people with experience trying to get to a leadership role?
ShowNotes and Episode Transcript on www.cloudsecuritypodcast.tv
Twitter - @kaizenteq @hashishrajan
If you want to watch videos of this and previous episodes:
- Twitch Channel: https://lnkd.in/gxhFrqw
- Youtube Channel: https://lnkd.in/gUHqSai
-
WHAT IS SECURITY CHAOS ENGINEERING? - JEROME WALTER, SECURITY MODERNISATION
27 september 2020 · 1 uur 3 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Jerome Walter, Security Modernisation, Director, VMWare Lees meer
Host: Ashish Rajan - Twitter @hashishrajan
Guest: Jerome Walter - Linkedin @JWalter
In this episode, Jerome & Ashish spoke about
What is with the title - Security Modernisation?
What is Security Chaos Engineering?
What is Chaos Engineering Experiments?
Example of a Chaos Engineering Experiment
Are the experiments running continuously or point in time?
How do we balance between putting security controls vs developer convenience?
Is there an element of Pentesting in Security Chaos Engineering?
Does the Chaos Experiments need to take place in Production?
Is Chaos Engineering and DevSecOps same?
How do you know the maturity of a Chaos Engineering Practice?
How important is organisation culture when it’s going Agile?
Is there a need for people to know Threat Modelling to start with Chaos Engineering experiments?
ShowNotes and Episode Transcript on www.cloudsecuritypodcast.tv
Twitter - @kaizenteq @hashishrajan
If you want to watch videos of this and previous episodes:
- Twitch Channel: https://lnkd.in/gxhFrqw
- Youtube Channel: https://lnkd.in/gUHqSai
-
Security and Compliance in AWS Cloud
20 september 2020 · 1 uur 2 min
In this episode of the Virtual Coffee with Ashish edition for Cloud Security Podcast, we spoke with Alexander J Yawn - ISC2 Miami Board Member | NABCRMP Founding Board Member Lees meer
Host: Ashish Rajan - Twitter @hashishraja
Guest: Alexander J Yawn - Linkedin @AJYawn
In this episode, AJ & Ashish spoke about
What was your path into CyberSecurity?
What does Compliance in Cloud mean for you?
What is Shared Responsibility?
How is Compliance different in a Hybrid world?
For anyone who used to audit on-premise, is it difficult to audit cloud environments?
There are so many AWS services for security, are those for monitoring or audit?
Do Auditors need to be technical like Cloud Engineer to be successful as an auditor in Cloud?
Auditors should be open to the idea of learning cloud?
Do Auditors need to be Certified Architect?
What are the some of the easy things to knocks off to start building foundation stuff?
Is there a recommended time frame between audits in a cloud world?
Can this Compliance task be automated?
How is the GuardDuty report different to Trusted Advisor Report?
Is there a company mandate to check these security services?
What advice can you provide for preparing for an audit against specific compliance framework?
Does a point in time check make sense in cloud?
Does the cloud provider provide advice to their customer when they are not secure?
How does compliance scale from a startup to an enterprise?
Is there additional cost for multiple AWS Accounts?
Where can auditors go to know more about doing Audits on Cloud?
ShowNotes and Episode Transcript on www.cloudsecuritypodcast.tv
Twitter - @kaizenteq @hashishrajan
If you want to watch videos of this and previous episodes:
- Twitch Channel: https://lnkd.in/gxhFrqw
- Youtube Channel: https://lnkd.in/gUHqSai
-
Identity & Cross Account Access Management in AWS | CLOUD SECURITY - Alexandre Sieira
13 september 2020 · 1 uur 18 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Alexandre Sieira - Founder @ Tenchi Security Lees meer
Host: Ashish Rajan - Twitter @hashishrajan
Guest: Alexandre Sieira - Twitter @AlexandreSieira
In this episode, Alex & Ashish spoke about
What was your path into CyberSecurity?
What does Cloud Security mean for you?
How is Security different in a cloud world?
What are the kind of Identities in AWS?
What are the challenges with IT?
Identity in AWS vs Identity in Azure?
Best practices for Privilege and non-Privilege users in AWS?
AWS SSO
How important are Domain Accounts in Cloud World/
Importance of 2FA?
What is Cross Account and why does it matter in Cloud?
IAM Role in AWS?
AWS STS service in AWS?
What about Bio metrics as a 2FA?
How does one manage identity across a large cloud landscape?
Multi-cloud or Poli-cloud?
Security people that know all clouds?
How should one manage Root Accounts in AWS?
What are the challenges with Identity that people are not talking enough about?
Recommendation on good source of AWS security training
Thoughts on AWS Cognito?
Cognito Research by Andres Riancho- https://andresriancho.com/internet-scale-analysis-of-aws-cognito-security/
Auditing IAM using Cloud Spanning - https://github.com/salesforce/cloudsplaining
Policy Sentry - https://github.com/salesforce/policy_sentry
IAM Policy Generator and AWS Challenges between products
ShowNotes and Episode Transcript on www.cloudsecuritypodcast.tv
Twitter - @kaizenteq @hashishrajan
If you want to watch videos of this and previous episodes:
- Twitch Channel: https://lnkd.in/gxhFrqw
- Youtube Channel: https://lnkd.in/gUHqSai
-
WHAT IS AZURE IDENTITY MANAGEMENT | CLOUD SECURITY
6 september 2020 · 49 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with David O’Brien, MVP Azure , Argos Founder Lees meer
Host: Ashish Rajan - Twitter @hashishrajan
Guest: David O'Brien - Twitter @david_obrien
In this episode, David & Ashish spoke about
What does Cloud Security in Azure mean for you?
What is Identity & Access Management?
What is IAM from Hybrid vs in Cloud?
How does this compare to identity in AWS IAM/Organisations?
What kind of Human Users exist in Azure?
What kind of Robot Users exist in Azure?
How does Identity differ for Third Party in Azure?
How does Privilege Access Management work in Azure?
What kind of Deployment Types exist in a mature vs new built in Azure?
ShowNotes and Episode Transcript on www.cloudsecuritypodcast.tv
Twitter - @kaizenteq @hashishrajan
If you want to watch videos of this and previous episodes:
- Twitch Channel: https://lnkd.in/gxhFrqw
- Youtube Channel: https://lnkd.in/gUHqSai
-
CLOUD SECURITY POSTURE MANAGEMENT - CSPM - GAURAV KUMAR
30 augustus 2020 · 56 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Gaurav Kumar, co-founder of RedLock (now part of Palo Alto Prisma Cloud). Lees meer
Host: Ashish Rajan - Twitter @hashishrajan
Guest: Gaurav Kumar - Linkedin
In this episode, Gaurav & Ashish spoke about
What was your path into CyberSecurity
What does Cloud Security mean for you?
If I am starting in Cloud today, do I need a CSPM?
Do I need a CSPM if I am in multi-cloud with a small foot print?
Story behind Gartner not recognising CSPM as a legit space?
What are the current problem spaces that are being solved or not solved in Cloud Security?
Is Security Observability, same as behaviour analysis?
Is Security Observability, appear in cloud space and not just logging?
What’s the example of Observability?
Is CloudTrail and Insights an example of Observability?
How important is logging everything vs relevant observation from logs?
What do you think of CASB and that space?
How do you find out what to protect the assets you have in cloud?
Recommendation on getting over “alert fatigue” from CASB, CSPM?
Do you see compliance at scale done really well?
Apart from Cost Saving, & moving fast, is security another reason for why people should look at cloud?
Are there are any good resources for Cloud Security training for staff?
ShowNotes and Episode Transcript on www.cloudsecuritypodcast.tv
Twitter - @kaizenteq @hashishrajan
If you want to watch videos of this and previous episodes:
- Twitch Channel: https://lnkd.in/gxhFrqw
- Youtube Channel: https://lnkd.in/gUHqSai
-
HOW TO BUILD SECURE ENVIRONMENTS IN Google Cloud - DARPAN SHAH
23 augustus 2020 · 58 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Darpan Shah, Cloud Security Engineer. Darpan has 8 AWS Certificates, 6 GCP certificates and at his work, he works on both Google Cloud and AWS. Lees meer
Host: Ashish Rajan - Twitter @hashishrajan
Guest: Darpan Shah - Website
In this episode, Darpan & Ashish spoke about
What was your path into CyberSecurity or your current role?
What does Cloud Security mean for you?
Where does a Startup starting in Google Cloud start for Security Foundation?
What is Project?
What is an Organisation?
How does Identity and Access Management work in Google Cloud?
How do you scale the architecture from startup to an Enterprise?
How does one manage permissions at scale in Google Cloud?
How do you implement a simple architecture of a web app in Google Cloud?
What is VPC?
Where can people find information on security in Google Cloud?
How is Google Cloud different to Oracle Cloud/Ali Baba cloud?
Where can people goto upskill and get a job in Google Cloud?
ShowNotes and Episode Transcript on www.cloudsecuritypodcast.tv
Twitter - @kaizenteq @hashishrajan
If you want to watch videos of this and previous episodes:
- Twitch Channel: https://lnkd.in/gxhFrqw
- Youtube Channel: https://lnkd.in/gUHqSai
-
HOW TO BUILD SECURE ENVIRONMENTS IN MICROSOFT AZURE - NICHOLAS HUGHES
16 augustus 2020 · 53 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Nicholas Hughes, CEO of EITR Technologies. Lees meer
Host: Ashish Rajan - Twitter @hashishrajan
Guest: Nicholas Hughes - Linkedin
In this episode, Nicholas & Ashish spoke about
Your path into CyberSecurity
What does Cloud Security mean for you?
Where does one start when it comes to starting today in Azure?
What’s the highest level of segregation that one can have in Azure?
What does an Azure AD Tenant & Azure Subscription look like?
What is a Resource Group in Azure and how is it different to the one in AWS?
Hierarchical and Name space structure of Azure Resources
Why would you have a Resource Group per subscription instead of all Resource Group in one subscription?
Is Account/Subscription the blast radius?
What does blast radius mean?
How do you manage Compliance and Access to multiple Subscription/
What is Management Groups in Azure and do subscription live in there?
How would you structure Management Groups in a business hierarchy?
How does policies get applied to multiple subscriptions using Management Groups?
Do you share identity between subscriptions?
How does Identity work in Enterprise, where shared identity is the only way?
How does Account structure differentiate between a Startup, SMB vs Enterprise?
What kind of capability exist for cost?
What does Account Vending look like in Azure?
How does Azure Policy works?
ShowNotes and Episode Transcript on www.cloudsecuritypodcast.tv
Twitter - @kaizenteq @hashishrajan
If you want to watch videos of this and previous episodes:
- Twitch Channel: https://lnkd.in/gxhFrqw
- Youtube Channel: https://lnkd.in/gUHqSai
-
HOW TO CREATE AN EFFECTIVE CYBER SECURITY TEAM - CLINT GIBLER
9 augustus 2020 · 49 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Clint Gibler Lees meer
Host: Ashish Rajan - Twitter @hashishrajan
Guest: Clint Gibler - Linkedin
In this episode, Clint & Ashish spoke about
Your path into CyberSecurity
What does Cloud Security mean for you?
What does application security mean for you?
What makes a good metrics for an effective security team?
Principles, mindsets, and methodologies of highly effective security teams
What is SAST, DAST
Any open source tools that can be integrated into CI/CD pipeline?
Is there pentesting knowledge required to move to use DAST tools?
How to effectively setup DAST Tool in an organisation? (19:30)
What is Software Composition Analysis
How does one bring cohesion between security teams?
How does security prove to be valuable to teams like Sales & Marketing
How does one reduce the noise to signal ratio from the AppSec team
What has been your best or worst security team experience?
ShowNotes and Episode Transcript on www.cloudsecuritypodcast.tv
Twitter - @kaizenteq @hashishrajan
If you want to watch videos of this and previous episodes:
- Twitch Channel: https://lnkd.in/gxhFrqw
- Youtube Channel: https://lnkd.in/gUHqSai
-
Application Security AppSec 101 - Tanya Janca
2 augustus 2020 · 1 uur 7 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Tanya Janca, Founder, SheHacksPurple & WeHackPurple. Lees meer
Host: Ashish Rajan - Twitter @hashishrajan
Guest: Tanya Janca - Linkedin
Tanya & Ashish spoke about
Who is Tanya Janca? :)
What was your path into CyberSecurity or your current role?
What has professional life been after leaving Microsoft?
What does Cloud Security mean for you?
What is Application Security or AppSec?
Tanya Janca’s Book - “Alice and Bob learn Application Security”
How can someone start in Application Security, specially if they are trying to move laterally?
What is Static Code Analysis?
What is DevSecOps
What is CI/CD Pipeline?
Loss of AppSec knowledge when people move on? How do you find the motivation to continue?
What is an AppSec Program and how can one make it successful?
What does a Mature AppSec Program look like?
Are there any tools used for Threat Modelling or is it conducted separately?
What’s the most difficult piece of AppSec discipline to explain to others again and again?
How do I get buy in from management?
How do you do Threat Modelling in CI/CD Pipeline or automate it?
What soft skills do you need to be an Application Security person?
How do you merge AppSec risk in the infrastructure risk to get a wholistic view?
ShowNotes and Episode Transcript on www.cloudsecuritypodcast.tv
Twitter - @kaizenteq @hashishrajan
If you want to watch videos of this and previous episodes:
- Twitch Channel: https://lnkd.in/gxhFrqw
- Youtube Channel: https://lnkd.in/gUHqSai
-
Getting Started with Chaos Engineering - What is it and how can it be used to build Application resiliency? - Aaron Rinehart, Verica
2 augustus 2020 · 1 uur 1 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Aaron Rinehart, CTO Co-Founder Verica. Lees meer
This is episode not to miss.
Host: Ashish Rajan - Twitter @hashishrajan
Guest: Aaron Rinehart - Linkedin
Aaron & Ashish spoke about
Who is A-aran? :)
What was your path into CyberSecurity or your current role?
What is Chaos Engineering?
Is Fuzzing part of Chaos Engineering?
Is Chaos Engineering for SREs?
Is there an example of application fault injection from a cloud perspective?
What concepts of Chaos Engineering are people not talking about?
Does Chaos Engineering need to happen in production?
How does Chaos Engineering affects readiness in terms of incident response?
Would Chaos Engineering be part of a Table Top Exercise with executives?
How does Chaos Engineering affect automation and Security?
What are the trends that you are seeing in Chaos Engineering?
Is Cloud Transformation the right time to trigger Chaos Experiments?
Is there a Maturity Model to Chaos or Chaos is offered as a service?
What are the elements to building a business case for chaos engineering to get support from business stakeholders?
ShowNotes and Episode Transcript on www.cloudsecuritypodcast.tv
Twitter - @kaizenteq @hashishrajan
If you want to watch videos of this and previous episodes:
- Twitch Channel: https://lnkd.in/gxhFrqw
- Youtube Channel: https://lnkd.in/gUHqSai
-
Cloud Security in Operational Technology vs Information Technology world - Parul Kharub, CISSP
19 juli 2020 · 55 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Parul Kharub, CISSP, HMM. Parul has spent number of years in the Operational Technology (OT) space building cybersecurity strategy and if you in the OT space or want to do cybersecurity in this space. Lees meer
This is episode not to miss.
Host: Ashish Rajan - Twitter @hashishrajan
Guest: Parul Kharub - Linkedin
Parul & Ashish spoke about
What was your path into CyberSecurity or your current role?
What does Cloud Security mean for you?
Do you work in any particular cloud provider or multi-cloud?
Operational Technology Vs Informational Technology, what’s the difference?
Example of industries that use Operational Technology
How is the public cloud space effecting OT environments?
What is Industry Evolution 4.0?
What is IoT?
Why would someone move OT environment (physical assets) to Cloud?
Example of Cyberattacks in OT and how do these attackers get access to this network?
Social Engineering, Phishing, SPAMs are these relevant in Operational Technology environments?
How are the different environments like IT, Corporate IT & Operational Technology architected in this industries?
Do Executives, C-Suite in such industries know about cybersecurity for OT?
Is the Information Security Triad for OT world different? CIA + Safety
What are the right process to consider for an Operational Technology environment?
What does Incident Response and CyberSafety process and training look like in OT environments?
Relevance of IoT and AI in OT (Smart Factory or Smart Devices or 5G LTE)?
What certifications and training (certifications) are available for cybersecurity jobs in an Operational Technology industry (e.g Tesla) ?
ShowNotes and Episode Transcript on www.cloudsecuritypodcast.tv
Twitter - @kaizenteq @hashishrajan
If you want to watch videos of this and previous episodes:
- Twitch Channel: https://lnkd.in/gxhFrqw
- Youtube Channel: https://lnkd.in/gUHqSai
-
HOW TO BECOME A SUCCESSFUL CISO IN 2020 - Abbas Kudrati, Microsoft
12 juli 2020 · 1 uur 4 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Abbas Kudrati, CyberSecurity Advisor for Microsoft Asia Pacific Region. Abbas has previously worked in various large companies as a CISO and continues to share and support Microsoft Azure customers understand security in a world of cloud. This is episode not to miss. Lees meer
Host: Ashish Rajan - Twitter @hashishrajan
Guest: Abbas Kudrati - Linkedin
Abbas & Ashish spoke about
What was your path into CyberSecurity or your current role?
Information Security Vs Cyber Security, what’s the difference?
What does Cloud Security mean for you?
What is Digital Transformation and why CISOs are being involved?
Board meetings think about cybersecurity and risk?
Has Cloud made Board conversations easier for more budget?
What kind of objective is the focus for CISOs within different industries?
Example of business use case for moving to O365 for compliance?
What are the impact on cyber priorities for CISO because of COVID19?
How do you show value of CyberSecurity for the organisation and the Board?
What are the Top 3 priorities for CISOs in 2020?
Have COVID-19 affected businesses reaching out consulting companies in a particular industry?
How has COVID-19 affected the Business Continuity plan, Crisis Management plans, Incident Response Plan and related teams?
Longevity of CISO roles, why most roles don’t go beyond 18 months?
ShowNotes and Episode Transcript on www.cloudsecuritypodcast.tv
Twitter - @kaizenteq @hashishrajan
If you want to watch video of this and previous episodes:
- Twitch Channel: https://lnkd.in/gxhFrqw
- Youtube Channel: https://lnkd.in/gUHqSai
-
How to do Google Cloud Security Well - The 2020 Edition - Darpan Shah
5 juli 2020 · 56 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Darpan Shah, Cloud Security Engineer. Darpan has 8 AWS Certificates, 6 GCP certificates and at his work, he works on both Google Cloud and AWS. This is episode not to miss. Lees meer
Host: Ashish Rajan - Twitter @hashishrajan
Guest: Darpan Shah - Website
Darpan & Ashish spoke about
What was your path into CyberSecurity or your current role?
What does Cloud Security mean for you?
What public cloud provider do you focus on?
What makes you like Google Cloud over AWS? Vice versa?
Where does Kubernetes/Containers fit into maturity stages of Google Cloud?
Is multi-cloud in the same organisation a reality?
What does security in Google Cloud look like compared to AWS? - Basic security 101s differences, Auditing, threat management, EC2 vs project security examples
How is security managed and operationalising across multi-cloud AWS & GCP
Where can one start today with security on Google Cloud, if they already are on AWS?
Security controls across EC2 vs serverless vs containers in a multi-cloud world
Maintaining visibility of assets and secure configurations in a multi-cloud environment?
What tools can you use to get a single view for multi-cloud?
How do you monitor for threats? Orchestration or detection?
What are people not talking about cloud security in multi-cloud?
ShowNotes and Episode Transcript on www.cloudsecuritypodcast.tv
Twitter - @kaizenteq @hashishrajan
If you want to watch video of this and previous episodes:
- Twitch Channel: https://lnkd.in/gxhFrqw
- Youtube Channel: https://lnkd.in/gUHqSai
-
HOW TO BECOME A CLOUD SECURITY ENGINEER in 2020 | Including Top Certifications
28 juni 2020 · 46 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Christopher Hughes, CISSP, Cloud Security Engineer. Lees meer
Host: Ashish Rajan - Twitter @hashishrajan
Guest: Chris Hughes - Linkedin
Chris & Ashish spoke about
What was Chris’s path into CyberSecurity & Cloud Security?
What is a Cloud Security Engineer?
What does Cloud Security mean in AWS or Azure or GCP context?
For any Students/SysAdmins/developers listening, who want to get into the field (certification etc)
Have doing the certifications been helpful?.
Any recommendations for those who want to pass the AWS Security Speciality Exam?
What are some of the beginner or advanced security implementations in AWS that you can share for the audience to learn from?
How does one maintain the security review cycle of the cloud service?
Examples of Cloud Security scenarios that you get involved with through Cloud Security Alliance work
Course for AWS Security Speciality Exam, recommendation by Chris Hughes - https://www.udemy.com/course/aws-certified-security-specialty/
ShowNotes and Episode Transcript on www.cloudsecuritypodcast.tv
Twitter - @kaizenteq @hashishrajan
If you want to watch video of this and previous episodes:
- Twitch Channel: https://lnkd.in/gxhFrqw
- Youtube Channel: https://lnkd.in/gUHqSai
-
Building an Engineering Security Culture - Failure stories included - Edwin Kwan, Tyro Payments
21 juni 2020 · 45 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Edwin Kwan, Head of Application and Software Security at Tyro payments. Lees meer
Host: Ashish Rajan - Twitter @hashishrajan
Guest: Edwin Kwan - Twitter @edkwan
Edwin & Ashish spoke about
What was Edwin’s path into CyberSecurity?
What is AppSec for people who don't know?
What is the difference between Application Security and Software Security?
Is being a developer an advantage going into Application Security?
Is AppSec any different between cloud compared so an application deployed on-premise?
Enabling an engineering security culture - What does this mean for those who don't know?
Engineering Security Culture - How has it evolved to now most of the code developed is using open source libraries
Enabling an engineering security culture - Where can one start and what should be avoided?
What is DevSecOps for you?
Edwin’s book - Failure of DevSecOps
ShowNotes and Episode Transcript on www.cloudsecuritypodcast.tv
Twitter - @kaizenteq @hashishrajan
If you want to watch the previous episodes:
- Twitch Channel: https://lnkd.in/gxhFrqw
- Youtube Channel: https://lnkd.in/gUHqSai
-
TIPS FOR WOMEN IN INFORMATION SECURITY TO GET A JOB IN CYBER SECURITY - Alannah Goh, 0xCC
14 juni 2020 · 58 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Alannah Guo, Founder of 0xCC & Pentester. Lees meer
Host: Ashish Rajan - Twitter @hashishrajan
Guest: Alannah Guo - Twitter @AlannahGuo
Alannah & Ashish spoke about
What was your path into CyberSecurity?
What's the best way to get into pentesting?
Do you have to be a fan of gaming/star wars/mr robot to be connect with fellow cybersecurity people?
Is it important to technical as a women to be respected by male colleagues in cybersecurity
What are the advantages of working as a pentester, if a female audience member is in cloud and wants to get into web app pentesting, it is an advantage or not?
Are there any communities that our audience can be part of to network or learn more about PenTesting
What is 0xCC?
What was special about the 0xCC merchandise this year?
Value of Women in Cyber groups / seeking Mentorship
ShowNotes and Episode Transcript on www.cloudsecuritypodcast.tv
Twitter - @kaizenteq @hashishrajan
If you want to watch the previous episodes:
- Twitch Channel: https://lnkd.in/gxhFrqw
- Youtube Channel: https://lnkd.in/gUHqSai
-
Google Cloud Security - How does Google Cloud work?
7 juni 2020 · 55 min
In this episode sponsored by Virtual Coffee with Ashish edition, we spoke with Francesco Cipollone, Chapter Chair (UK), Cloud Security Alliance Lees meer
Host: Ashish Rajan - Twitter @hashishrajan
Guest: Francesco Cipollone - Twitter @Frances07789950
Francesco & Ashish spoke about
Why would someone choose Google Cloud over AWS or Azure?
What does Security in Google Cloud look like for those using other cloud?
Is making Terraform a universal script for multi-cloud environment, great idea?
Is multi-cloud a good idea?
How mature is Security in Google compared to AWS/Azure?
For any Security Architect listening to this episode, what should they consider for Google Cloud?
EKS vs GKE?
ShowNotes and Episode Transcript on www.cloudsecuritypodcast.tv
Twitter - @kaizenteq @hashishrajan
If you want to watch the previous episodes:
- Twitch Channel: https://lnkd.in/gxhFrqw
- Youtube Channel: https://lnkd.in/gUHqSai
-
What is GOOD COMPANY CULTURE (WITH EXAMPLE ) during COVID19 with remote employees!
31 mei 2020 · 37 min
In this episode sponsored by Virtual Coffee with Ashish edition, we spoke with Graeme Cantu-Park, CISO of Matilion Lees meer
Host: Ashish Rajan - Twitter @hashishrajan
Guest: Graeme Cantu-Park - Linkedin
What is culture - why is it important and how does it intersect with security?
How is culture done right for remote employees, thanks COVID!
Why is culture in Growth organisations so important?
Can you tell me some examples from experience of what worked well there?
Security often isn't included in a growth organisation until a later stage (look at zoom). How do you apply security without disrupting culture?
Anyone starting in a CISO/Head of Security role with a small team or brought into building the team, what should they focus on in the beginning?
Is it more a low cost security product or build first approach you prefer to doing security in a growth environment?
ShowNotes and Episode Transcript on www.cloudsecuritypodcast.tv
Twitter - @kaizenteq @hashishrajan
If you want to watch the previous episodes:
- Twitch Channel: https://lnkd.in/gxhFrqw
- Youtube Channel: https://lnkd.in/gUHqSai
-
What is a Connected Car | How to secure api in connected cars? - Virtual Coffee with Ashish - Alissa Knight
24 mei 2020 · 1 uur 3 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Alissa Knight, Car Hacker, Author, Cybersecurity Influencer and Entrepreneur Lees meer
Host: Ashish Rajan - Twitter @hashishrajan
Guest: Alissa Knight - Twitter @alissaknight
What is a Connected Car?
What is API?
How do I secure APIs?
How can someone secure API for Connected Cars?
What should you do to monitor API?
Can I buy a Tesla?
Apple has API to record body contact, which cannot be turned OFF
COVID Safe apps and the future of how freely information is collected by internet aware smart devices?
Who do you report to when you are concerned about your connected car?
ShowNotes and Episode Transcript on www.cloudsecuritypodcast.tv
Twitter - @kaizenteq @hashishrajan @alissaknight
-
What is SRE? When should i have SRE? - Virtual Coffee with Ashish - Tim Heckman
17 mei 2020 · 41 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Tim Heckman, Sr. SRE Netflix. Lees meer
Host: Ashish Rajan - Twitter @hashishrajan
Guest: Tim Heckman
What is SRE?
Is it helpful to have SRE team when you already have a Security team?
What does Security in Netflix look like?
How can people scale maturity in security when dealing with cloud and multi-cloud?
ShowNotes and Episode Transcript on www.cloudsecuritypodcast.tv
Twitter - @kaizenteq @hashishrajan @theckman
-
NIST CyberSecurity Metrics for the Board - Taylor Hersom
10 mei 2020 · 57 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with @Taylor Hersom about Lees meer
Why do CyberSecurity Professionals need to think about talking Cyber Security to the board?
What kind of cybersecurity metrics works best for Board?
Is Fear, Uncertainty, Doubt (FUD) the right way to approach presenting cybersecurity to the board?
FAIR methodology to put $ value against each RISK - Risk and Governance is a great space to start for those who want to start in cybersecurity but are not too technical?
Does being knowledgable in datacenter governance beneficial in world of Cloud?
Can companies get NIST Certified or is it only NIST Compliance?
NIST vs ISO vs CMMC and Department of Defence affecting the industry?
ShowNotes and Episode Transcript on www.cloudsecuritypodcast.tv
Twitter - @kaizenteq @hashishrajan
-
Virtual Coffee with Ashish - Cloud Security Podcast & Hacker Valley Studio
3 mei 2020 · 1 uur
In this episode, we sit with Chris Cochran & Ronald Eddings from Hacker Valley Studio. Lees meer
Chris Cochran & Ronald Eddings from Hacker Valley Studio & Ashish spoke about
How did you get into CyberSecurity?
What is Cloud Security?
Is multi-cloud a thing?
What is a good maturity in the Cloud Security space?
How does Security change in a world of COVID19?
What are people not talking enough about cloud security ?
Mentorship and CyberSecurity Podcast
More info and show notes transcript on www.cloudsecuritypodcast.tv
Twitter - @kaizenteq @hashishrajan @theHackerValley @chriscochrcyber @ronaldeddings
-
Scaling a DevSecOps model | SERVERLESS SECURITY BEST PRACTICES with Abhay Bhargav , CTO , we45
26 april 2020 · 41 min
In this episode, we sit with Abhay Bhargav, CTO, we45. Lees meer
Abhay & Ashish spoke about
What is Cloud Security?
Is multi-cloud a thing?
What is DevSecOps?
What is a good maturity in the DevSecOps space?
What’s a free tool to get started today for developers?
What about starting with Threat Modelling as a beginner?
Doing Application Security (AppSec) at scale, what does that look like?
How does Security change in a world of serverless?
Can there be too many functions?
Lack of servers in serverless, mean that Static code analysis, Software Compositions important?
What’s the most common misconception of cloud?
What are people not talking enough about in the appsecurity and cloud security space?
More info and show notes on www.cloudsecuritypodcast.tv
Twitter - @kaizenteq @hashishrajan @abhaybhargav
-
CORONAVIRUS & CYBERSECURITY | ISOLATION LIFE
19 april 2020 · 10 min
In this episode, we are covering a trending topic CORONAVIRUS OR COVID19 and how it is affecting businesses around me and my friends & colleagues. I also talk about my personal challenge with starting a new job in this COVID world with a remote team. Lees meer
I hope you are reaching out to your friends and family to check on them and staying indoors to keep the community safe too.
You can reach me on ashish@kaizenteq.com
Ashish's Website: www.ashishrajan.com
Previous episodes videos are available on www.cloudsecuritypodcast.tv
-
How to secure and improve cloud environment - Merritt Baer, Principal Security Architect, AWS
11 april 2020 · 52 min
In this episode, we sit with Merritt Baer, Principal Security Architect, AWS. Lees meer
Merritt & Ashish spoke about
What is Cloud Security?
What does security look like in a mature organisation?
How can security integrate into the business? How does AWS do it?
What is the AWS Rapid Prototyping team?
What are the signs of an organisation with mature security?
Importance of being technical as a women in cybersecurity?
What is Tech and Roses Group?
More info and show notes on www.cloudsecuritypodcast.tv
Twitter - @kaizenteq @hashishrajan @merrittbaer
-
Cloud Center of Excellence in AWS | How Atlassian manages Risk and Compliance - Atlassian 2020
5 april 2020 · 37 min
In this episode, we sit with Michael Fuller, Cloud Centre of Excellence, Atlassian. Lees meer
Michael & Ashish spoke about
Importance of being standardisation of security across the cloud footprint?
Challenges of having standardised security when a M&A bring companies which are lot more mature in cloud?
What were the challenges of implementing this in a global company like Atlassian?
How do you classify maturity in cloud? What does the maturity scale look for you?
How do global teams at Atlassian do effective decision making while working remotely?
More info and show notes on www.cloudsecuritypodcast.tv
Twitter - @kaizenteq @hashishrajan Michael Fuller
-
A TECHNICAL WOMEN DELIVERING NON-TECHNICAL TRAINING IN CYBERSECURITY | HOW TO BUILD CYBERSECURITY TRAINING PROGRAM- Fareedah Shaheed, Online Safety and Security Strategist, Sekuva
29 maart 2020 · 31 min
In this episode, we sit with Fareedah Shaheed, Online Safety and Security Strategist @Sekuva. Lees meer
Fareedah & Ashish spoke about
Importance of being technical for women in cybersecurity?
Challenges of training cybersecurity to a non-technical audience?
How to work safely from home during COVID Season?
Example of SCAMs for elderly during this time?
How to start building a cybersecurity online course?
More info and show notes on www.cloudsecuritypodcast.tv
Twitter - @kaizenteq @hashishrajan @cyberfareedah