Ryan Sanders 🔐

Time for Plan B? The recent global outages at Microsoft and Amazon Web Services (Amazon Web Services (AWS)) serve as a stark reminder of the vulnerabilities of #cloud platforms. A #DDoS attack on Microsoft and similar disruptions at AWS highlight the critical importance of robust contingency plans and multi-cloud strategies in today's digital landscape. These incidents, closely following the CrowdStrike outage, underscore the fragility of cloud services. The recent wave of disruptions, coupled with tech layoffs and reductions in force, raises questions about the consequences of diminishing headcounts and an increasing reliance on AI. In light of these events, having a solid Plan B is no longer a choice but a necessity. Diversifying cloud service providers and preparing for potential disruptions are crucial steps to safeguard against future risks. For more insights, check out my latest Forbes article on the implications of the recent Microsoft and AWS outages: https://lnkd.in/g-guXJfm Stay informed on #technews, AI, and #cybersecurity by following my Forbes articles for the latest updates. #CloudComputing #Microsoft #AWS #Outage #CyberSecurity #BusinessContinuity #MultiCloudStrategy #TechNews

28

14 Comments

Identity and access management (IAM) can seem like a gentle hill at first. It’s not too difficult to manage, assigning logins and passwords, and granting access control based on a person’s job in an organization. However, that gentle hill can shift as you start to configure IAM. Suddenly, it can feel like a steep mountain slope: Terminology and concepts overlap and slip beneath your feet, which is a serious problem because security boundaries in the cloud are based on understanding crucial identity concepts. CC Sita Lakshmi Sangameswaran #IAM #GoogleCloud

1

Google Cloud accidentally nukes customer account and causes two weeks of downtime. This is a valuable lesson in operational controls and risk mitigation. Remember three copies is required for a true backup because two is one and one is none. That philosophy saved UniSuper from the potentially business-ending event. It's important to always have a robust backup plan in place to mitigate risks and ensure business continuity. #GoogleCloud #OperationalControls #RiskMitigation #BackupPhilosophy #UniSuper

9

1 Comment

Combat malicious code with Red Hat Trusted Artifact Signer to help increase the confidence and trustworthiness of an artifact moving through the supply chain. Find out how.

1

Thanks to Bob Lysak for hosting a great Lunch n Learn with our Macy's Technology team's on "Open Source Vulnerabilities". Also, special thanks to Calvin Kendrick for helping to answer additional questions and for facilitating the Lunch n Learn. #collaboration #informationsecurity #infosec #cybersecurity #applicationsecurity #appsec #lunchnlearn #discussion #vulnerabilities #knowledgesharing

43

2 Comments

The Cybersecurity and Infrastructure Security Agency (CISA) has recently published guidance on implementing Encrypted DNS to enhance security for federal agencies. This proactive step aims to protect sensitive information and mitigate DNS-based threats. Stay informed by reading the full article here: https://lnkd.in/d3Ncqctk 🛡️💻 #CyberSecurity #CISA #EncryptedDNS #DataProtection

1

😎 Finally, a Service Control Policy (SCP) increase! 🎉 The increased limits provide more flexibility for managing your organization's access control guidelines. #AWS #security #limits ⏬⏬⏬⏬⏬⏬⏬⏬⏬⏬⏬⏬ https://lnkd.in/gGapKQPE

11

1 Comment

Cybersecurity is a national security priority. Security is a team sport and public private information sharing is more important than ever. #cybersecurity #riskmanagement #criticalinfrastructuresecurity #publicprivatepartnership

12

The Office of Management and Budget issued new guidance last week modernizing FedRAMP to support federal agencies' adoption of secure commercial cloud services. Some of the updates include establishing FedRAMP within GSA, expanding authorization paths, and driving automation to streamline the process. These changes aim to enable federal agencies to leverage the commercial cloud while ensuring their robust security. This advancement streamlines the process, especially with the presumption of adequacy decision, and is a significant advancement for cloud adoption in the government!" https://lnkd.in/gtZJAT5g Reach out to Giancarlo Casella, CISSP, CISM, CISA if you need assistance on your FedRamp journey in AWS! #FedRAMP #CloudComputing #CyberSecurity #GovTech #AWS #SecurityAssuranceServices

6

Serious lessons here, and it starts with GCP https://lnkd.in/eMkdG7z4

22

2 Comments

This is a solid release from Amazon Web Services (AWS). Gathering evidence for and mapping to multiple frameworks is a much needed feature. "AWS Audit Manager introduced the AWS common controls library to help Governance, Risk and Compliance (GRC) teams efficiently map their enterprise controls into Audit Manager for evidence collection. The common controls library provides customers with a simpler way to collect evidence that supports overlapping controls across multiple compliance standards, streamlining the evidence collection process, reducing the work and time required for enterprise customers to onboard to Audit Manager, and start collecting evidence across their portfolio of compliance needs... A common control is a guideline that’s not specific to any framework or AWS resource. Instead, it’s designed to collect evidence for various control sources for a domain (e.g. Data Protection). Although common controls are not specific to a framework, they are mapped to frameworks such as NIST 800-53, Payment Card Industry Data Security Standard (PCI DSS) and Health Insurance Portability and Accountability Act (HIPAA). As a result, you can use these controls to collect evidence for multiple frameworks across your portfolio of compliance needs." Link >> https://lnkd.in/egqWR-kc It's a beautiful day to build beautiful things. #security #compliance #aws #cloudsecurity #cloud

23

1 Comment

Learn more about cloud usage & cost optimization with #FinOps principals and Microsoft tools, at our upcoming webinar Empowering cloud efficiency through FinOps. Register for live Q&A on Wednesday May 29, 10AM PST or to view the session recording on-demand. https://lnkd.in/gscSdJcB #Azure #CostManagement #Microsoft

11

Mastering the IAM Game? It starts by freeing the controlled chaos with IAM Groups, Policies, and Roles. We're talking CloudFormation scripts and getting hands-on - diving deep into securing access like pros. And there's more; I will also dishing out the hottest AI breakthroughs, so make sure you take a read!!! #AWS #CloudSecurity #IAM #IaCMavens #IAM #InfrastructureAsCode #TechInnovation#TechTrends #AWSCloudFormation #AIInsider #TechUpdates #AIBreakthroughs

4

Check out the detail blueprint on how to automate the migration of your Vmware environment to GCVE. #cloud #vmware #gcve Sean Leighton

11

Selecting the right cloud partners is critical. Recently, Google Cloud accidentally deleted a customer account, causing two weeks of downtime ⚠️. This highlights the importance of thoroughly vetting cloud providers and having strong contingency plans. Key points: Data Protection: Ensure your cloud partner has robust data protection measures 🛡️. Recovery Protocols: Verify they have reliable data recovery protocols 🔄. Contingency Plans: Develop and maintain comprehensive contingency plans 🚨. Understanding these risks is essential to protect your business. Choose wisely and stay prepared! https://lnkd.in/exbg3GVF #CloudComputing #RiskManagement #BusinessContinuity

5

1 Comment