How do you keep your organization's files, applications, and accounts safe on the cloud? It starts with a considered design approach. In these videos, Malcolm Shore outlines the major cloud security risks, some of which have resulted in service disruptions at companies like Azure, Dropbox, Google, and Amazon, and shows how to plan for and minimize risk when it comes to your own cloud deployments. He introduces concepts such as software as a service (SaaS) and infrastructure as a service, and the differences between public and private clouds. Then, after reviewing the cloud security best practices from the Cloud Security Alliance and the European Network and Information Security Agency (ENISA), Malcolm shows how to use SABSA, a popular security requirements mapping approach, to figure out the business requirements for a successful and secure cloud deployment of your own.
Topics include:
Essential cloud concepts: infrastructure, deployment models, and more
Defining trust models for clouds
Identifying governance and risk
Complying with legal and audit requirements
Managing incident response
Maximizing application security
Managing encryption and keys
Implementing virtualization
Introducing SABSA and the cloud attribute taxonomy