BlueDragon Podcast

BlueDragon Podcast

By BlueDragon PodcastTechnology
Download on the App Store

BlueDragon Podcast episodes

  • S01E10 From On-Premise to Cloud: Evolving Your Security Posture - Dwayne Natwick

    In this season's finale, Dwayne Natwick and I we dive into cybersecurity with Dwayne Natwick, a seasoned expert with over 30 years of IT experience. Dwayne shares his journey from running Token Ring cables as a teenager to becoming a global cloud security lead.
    Discover the evolution of cloud security, the importance of risk awareness, and the critical role of identity in modern cybersecurity. Learn about the latest trends in cloud security architecture, the significance of data classification, and the future of cybersecurity in the age of AI.
    Dwayne also discusses the challenges of keeping up with rapid technological changes and offers insights into building a risk-aware organization.
    This episode is packed with valuable insights for IT and business decision-makers looking to enhance their security posture and stay ahead in the ever-evolving tech landscape.
    Enjoy!
    CHAPTERS

    (00:00) Introduction and Background

    (06:47) The Evolution of Cloud Security

    (10:40) Data Classification and User Awareness

    (13:44) Privacy Regulations: Europe vs. US

    (23:59) Assessing Risk Culture and Tolerance

    (26:24) The Importance of Planning and Preparedness

    (30:11) Building a Risk-Aware Organization

    (34:16) Allocating Budget for Security Initiatives

    (38:54) The Critique of 'DevSecOps'

    (44:15) The Future Outlook: Expanding Training Services and Mentoring Initiatives


    49 min
  • S01E09 Mastering Hybrid Cloud Management for Enhanced Business Agility - Ahilan Ponnusamy

    Ahilan Ponnusamy, author of the book 'Technology Operating Models for Cloud and Edge,' discusses the concept of operating models and their importance in the IT ecosystem.
    He explains how cloud and edge technologies impact the technology operating model and emphasizes the prevalence of hybrid cloud as the standard deployment option for most organizations.
    Ponnusamy also critiques the bimodal IT approach, stating that it has failed due to its combative nature and lack of compatibility. He highlights the evolving IT landscape with the rise of AI, 5G, 6G, IoT, and edge computing, and advises IT decision-makers to build a flexible, resilient, secure, and extendable operating model.
    Ponnusamy also shares insights into the success and feedback of his book and discusses plans for a second edition that incorporates AI perspectives.

    CHAPTERS

    (00:00) Understanding Operating Models

    (08:02) The Impact of Cloud and Edge Technologies

    (12:58) The Failure of Bimodal IT

    (23:44) Building a Foundation for Future-Proof IT

    45 min
  • S01E08 Harnessing AI for Operational Excellence: Transforming Industrial Environments - Benny Lauwers

    Benny Lauwers, author of 'The Good, The Bad and the Practical: AI for doeners', discusses his background and how he got into writing a book on practical AI.
    He shares his experience in implementing AI in industrial environments, particularly in manufacturing. Lauwers emphasizes the challenges and benefits of applying AI in the industrial setting, including improving quality and safety.
    He also discusses a case study on using AI to detect and predict bad quality in a tile manufacturing company. The conversation highlights the importance of having people who believe in AI and are willing to take risks in implementing AI projects.
    The conversation explores the practical implementation of AI in organizations and the challenges that come with it. It emphasizes the importance of taking action based on AI signals and the need to consider the next steps after detection.
    The discussion also touches on the impact of AI on organizational culture and processes, the importance of data quality and preparation, and the need for companies to invest in IT infrastructure and data connectivity. The conversation concludes with insights on best practices for implementing AI, including considering alternative technologies, starting from the desired output, and the importance of continuous training and retraining of AI models.


    CHAPTERS

    (00:00) Introduction and Background

    (08:32) Practical AI in Industrial Environments

    (13:09) Case Study: Using AI in Manufacturing

    (21:58) Taking Action Based on AI Signals

    (24:02) The Impact of AI on Organizational Culture and Processes

    (26:04) The Importance of Data Quality and Preparation

    (28:47) Considering Alternative Technologies and Starting from the Desired Output

    (32:00) Continuous Training and Retraining of AI Models

    45 min
  • S01E07 Mastering Cloud Security: Essential Strategies for IT Leaders - Qamar Nomani

    In this conversation with Qamar Nomani, we discuss cloud security posture management (CSPM) and its benefits. Qamar shares his professional background and how he ended up writing a book on cloud security. They discuss the design and length of the book, as well as the key question of what CSPM is and its benefits.
    They also explore how CSPM fits into the broader cloud security ecosystem and the importance of cloud asset inventory in cybersecurity. They address the perception that cloud is less secure than on-premises and emphasize the shared responsibility model. Finally, they touch on compliance management and governance in the context of European directives.
    Cloud Security Posture Management (CSPM) tools help with compliance management by automating the process of checking and maintaining compliance with various standards and regulations. CSPM tools bring pre-built compliance benchmarks and engines, saving time and effort for engineers. They provide a dashboard and reports that show the organization's compliance score and highlight areas where improvements are needed. CSPM tools also assist in audits by allowing auditors to access masked assets and review controls and policies. Some major CSPM tools and vendors include Microsoft Defender for Cloud, Prisma Cloud, Orca, Sophos Optix, Wiz, Lacework, and Symantec CloudSOC.


    CHAPTERS

    (00:00) Introduction and Background

    (03:03) Understanding Cloud Security Posture Management (CSPM)

    (05:18) The Benefits of Cloud Security Posture Management

    (09:17) Integrating CSPM into the Cloud Security Ecosystem

    (19:04) The Importance of Cloud Asset Inventory in Cybersecurity

    (25:05) Addressing the Perception of Cloud Insecurity

    (29:02) Compliance Management and Governance in the Cloud

    (32:06) Introduction to CSPM and Compliance Management

    (36:42) CSPM Tools for Hybrid Cloud Environments

    (39:53) Expanding Compliance Beyond IT Infrastructure

    (48:49) DevSecOps and the Shift Left Approach

    (54:29) The Future of Qamar Nomani

    1 hr
  • S01E06 Cloud Data Governance: Ensuring Data Integrity and Security - Marcelo Leite

    In this episode, I talk with technology executive and author Marcelo Leite.
    We discuss the concepts of a database, data warehouse, data lake, and data lake house. He explains how these concepts have evolved and are used in modern data management.
    We also discuss the importance of data classification and data loss prevention (DLP) in ensuring data security, introduce the concept of data mesh and its relevance for CTOs and CIOs and covering two main themes: data mesh and the impact of cloud-based data platforms on security.
    We end with the Kusto Query Language (KQL) and the trend of SaaS solutions for data platforms. Enjoy!


    CHAPTERS

    (00:00) Introduction and Background of Marcelo Leite

    (07:40) Understanding the Concepts of Database, Data Warehouse, Data Lake, and Data Lake House

    (19:14) The Importance of Data Classification and DLP in Data Security

    (26:55) Exploring the Concept of Data Mesh

    (32:02) Why CTOs and CIOs Should Consider Data Mesh

    (33:09) Managing Complex Data Environments with Data Mesh

    (41:00) Ensuring Security in Cloud-Based Data Platforms

    (49:53) Analyzing Logs and Telemetry with Kusto Query Language (KQL)

    (53:23) Simplifying Data Analytics with SaaS Solutions

    (58:37) The Future of Data: Serving AI and Automation

    1 hr 5 min
  • S01E05 Enhancing Cybersecurity: Writing Strategies for Effective Risk Management - Vincent van Dijk

    Vincent van Dijk, an information security specialist, discusses his journey from software development to data science to cybersecurity.
    He emphasizes the importance of writing in cybersecurity and the need for clear and effective policies. Vincent also shares his thoughts on the impact of cloud computing and the rise of managed security service providers.
    He predicts that compliance will continue to increase and that the cybersecurity industry will face challenges related to stress and burnout. Vincent is currently working on two books, one about making choices and another about becoming the best cybersecurity expert.


    CHAPTERS

    (00:00:00) Introduction and Background

    (00:06:15) The Importance of Writing in Cybersecurity

    (00:11:10) Marker 7

    (00:13:19) The Impact of Cloud Computing on Information Security

    (00:25:33) Data-Driven Decision-Making in Cybersecurity

    (00:34:21) Challenges in the Cybersecurity Industry: Stress and Burnout

    (00:41:18) Upcoming Books: Making Choices and Becoming the Best Cybersecurity Expert


    43 min
  • S01E04 Navigating Cloud Adoption: Key Strategies for Managing Public Cloud - Stephane Eyskens

    Stefan Eysken, author of the Azure Cloud Native Architecture Map book, discusses his background and the motivation behind writing the book.
    He highlights the drivers for organizations to move to the cloud, including time to market, security, and cost. The conversation explores the evolution of Azure over the past five years, with a focus on the privatization of PaaS services and the rise of data and AI platforms.
    The discussion also touches on the importance of cloud security and the role of cloud architects and DevSecOps in ensuring secure cloud environments.
    The conversation covers various topics related to cloud computing, security, and the future of Azure.
    The main themes include the importance of writing secure code, the challenges of integrating security into the development process, the rise of DevSecOps and GitOps, the comparison between Azure and other cloud providers, the future of AI and data platforms, and Microsoft's open-minded approach to multi-cloud and open source.


    CHAPTERS

    (00:00:00) Introduction and Background

    (00:07:00) Privatization of PaaS Services

    (00:15:00) Cloud Repatriation: Trends and Considerations

    (00:29:30) Challenges of MLOps and Data Platforms

    (00:35:55) Continuous Learning and Keeping Up

    (00:45:34) Microsoft's Open-Minded Approach

    48 min
  • S01E03 Building Trust in the Digital Age: Insights on Cybersecurity and Cloud - Mike Bursell

    Mike Bursell, a cybersecurity expert and author of the book 'Trust in Computer Systems and the Cloud,' discusses the concept of trust in the digital world.
    He explores the definition of trust, the challenges of trust in computer systems and the cloud, and the emerging trend of zero trust. He also delves into the importance of a trusted computing base, the role of hardware security modules (HSMs), and the potential of confidential computing.
    Additionally, he discusses the relationship between open source and trust, the future of blockchain, and his upcoming projects.
    CHAPTERS

    (00:00:00) Introduction and Background of Mike Bursell

    (00:06:22) The Rise of Confidential Computing

    (00:12:31) The Role of Open Source in Trust

    (00:30:27) Upcoming Projects and Research

    39 min
  • S01E02 Mastering Cybersecurity: Navigating Privacy Laws and Compliance - Walter Rocchi

    Walter Rocchi, an ISO 27001 Lead Implementer and Lead Auditor, to discuss the importance of cybersecurity and privacy in European organizations.


    We talk about continuous improvement and training to ensure effective security measures.

    We compare the European mindset toward privacy and data protection with other continents, discuss the challenges of balancing European innovation and regulation, investigate the importance of frameworks like ISO 27001 and NIST in ensuring cybersecurity and data protection.


    We also touch on the relevance of cloud security and the role of information security officers in understanding cloud security and AI security.


    Then we conclude with a discussion on the current legal framework for exchanging personal data of European citizens with the US and the importance of technical controls in data protection.

    Enjoy!


    CHAPTERS

    (00:00:00) Introduction and Professional Background

    (00:08:31) The Evolution of Information Security and Privacy Risk Categories

    (00:24:12) Addressing the Gap Between Certification and Security Improvement

    (00:30:59) The Use of Frameworks in Different Countries

    (00:45:12) The Role of Information Security Officers in Cloud Security

    (00:53:28) The Current Legal Framework for Data Exchange between the EU and the US

    (01:01:13) The Future of Security and Privacy in Europe

    1 hr 4 min
  • S01E01 Mastering Cloud Migration: Strategies for Seamless Transitions - Jonah Andersson

    This first episode of the BlueDragon Podcast delves into the transformative world of cloud computing, featuring insights from industry expert Jonah Andersson. We discuss the evolution of Azure, cloud adoption trends, and the foundational knowledge necessary for leveraging cloud technologies effectively.

    CHAPTERS

    (00:00:00) Introduction and Overview

    (00:06:16) Cloud Adoption and Attitude of Organizations

    (00:12:40) Auto Scaling and Benefits of Cloud

    (00:24:28) Challenges and Benefits of Cloud Repatriation

    (00:36:01) The Importance of Cloud Security

    (00:40:24) The Evolving Role of Cloud Solution Architects

    (00:50:23) Jonah's Journey: Writing and Publishing a Book on Azure

    53 min

About BlueDragon Podcast

From the publisher's feed

Gain Fresh Perspective on Cloud & AI Technology, Security, Governance, and Auditing. For Decision Makers.