BlueDragon Podcast

By BlueDragon Podcast

Gain Fresh Perspective on Cloud & AI Technology, Security, Governance, and Auditing. For Decision Makers.... more

· Technology

Download on the App Store

Download on the App Store

Get it on Google Play

FAQs about BlueDragon Podcast:

How many episodes does BlueDragon Podcast have?

The podcast currently has 17 episodes available.

BlueDragon Podcast episodes:

September 02, 2024 S01E07 Mastering Cloud Security: Essential Strategies for IT Leaders - Qamar Nomani
In this conversation with Qamar Nomani, we discuss cloud security posture management (CSPM) and its benefits. Qamar shares his professional background and how he ended up writing a book on cloud security. They discuss the design and length of the book, as well as the key question of what CSPM is and its benefits.
They also explore how CSPM fits into the broader cloud security ecosystem and the importance of cloud asset inventory in cybersecurity. They address the perception that cloud is less secure than on-premises and emphasize the shared responsibility model. Finally, they touch on compliance management and governance in the context of European directives.
Cloud Security Posture Management (CSPM) tools help with compliance management by automating the process of checking and maintaining compliance with various standards and regulations. CSPM tools bring pre-built compliance benchmarks and engines, saving time and effort for engineers. They provide a dashboard and reports that show the organization's compliance score and highlight areas where improvements are needed. CSPM tools also assist in audits by allowing auditors to access masked assets and review controls and policies. Some major CSPM tools and vendors include Microsoft Defender for Cloud, Prisma Cloud, Orca, Sophos Optix, Wiz, Lacework, and Symantec CloudSOC.

CHAPTERS
(00:00) Introduction and Background
(03:03) Understanding Cloud Security Posture Management (CSPM)
(05:18) The Benefits of Cloud Security Posture Management
(09:17) Integrating CSPM into the Cloud Security Ecosystem
(19:04) The Importance of Cloud Asset Inventory in Cybersecurity
(25:05) Addressing the Perception of Cloud Insecurity
(29:02) Compliance Management and Governance in the Cloud
(32:06) Introduction to CSPM and Compliance Management
(36:42) CSPM Tools for Hybrid Cloud Environments
(39:53) Expanding Compliance Beyond IT Infrastructure
(48:49) DevSecOps and the Shift Left Approach
(54:29) The Future of Qamar Nomani
...more
1h
August 27, 2024 S01E06 Cloud Data Governance: Ensuring Data Integrity and Security - Marcelo Leite
In this episode, I talk with technology executive and author Marcelo Leite.
We discuss the concepts of a database, data warehouse, data lake, and data lake house. He explains how these concepts have evolved and are used in modern data management.
We also discuss the importance of data classification and data loss prevention (DLP) in ensuring data security, introduce the concept of data mesh and its relevance for CTOs and CIOs and covering two main themes: data mesh and the impact of cloud-based data platforms on security.
We end with the Kusto Query Language (KQL) and the trend of SaaS solutions for data platforms. Enjoy!

CHAPTERS
(00:00) Introduction and Background of Marcelo Leite
(07:40) Understanding the Concepts of Database, Data Warehouse, Data Lake, and Data Lake House
(19:14) The Importance of Data Classification and DLP in Data Security
(26:55) Exploring the Concept of Data Mesh
(32:02) Why CTOs and CIOs Should Consider Data Mesh
(33:09) Managing Complex Data Environments with Data Mesh
(41:00) Ensuring Security in Cloud-Based Data Platforms
(49:53) Analyzing Logs and Telemetry with Kusto Query Language (KQL)
(53:23) Simplifying Data Analytics with SaaS Solutions
(58:37) The Future of Data: Serving AI and Automation
...more
1h 5min
August 18, 2024 S01E05 Enhancing Cybersecurity: Writing Strategies for Effective Risk Management - Vincent van Dijk
Vincent van Dijk, an information security specialist, discusses his journey from software development to data science to cybersecurity.
He emphasizes the importance of writing in cybersecurity and the need for clear and effective policies. Vincent also shares his thoughts on the impact of cloud computing and the rise of managed security service providers.
He predicts that compliance will continue to increase and that the cybersecurity industry will face challenges related to stress and burnout. Vincent is currently working on two books, one about making choices and another about becoming the best cybersecurity expert.

CHAPTERS
(00:00:00) Introduction and Background
(00:06:15) The Importance of Writing in Cybersecurity
(00:11:10) Marker 7
(00:13:19) The Impact of Cloud Computing on Information Security
(00:25:33) Data-Driven Decision-Making in Cybersecurity
(00:34:21) Challenges in the Cybersecurity Industry: Stress and Burnout
(00:41:18) Upcoming Books: Making Choices and Becoming the Best Cybersecurity Expert

...more
43min
August 03, 2024 S01E04 Navigating Cloud Adoption: Key Strategies for Managing Public Cloud - Stephane Eyskens
Stefan Eysken, author of the Azure Cloud Native Architecture Map book, discusses his background and the motivation behind writing the book.
He highlights the drivers for organizations to move to the cloud, including time to market, security, and cost. The conversation explores the evolution of Azure over the past five years, with a focus on the privatization of PaaS services and the rise of data and AI platforms.
The discussion also touches on the importance of cloud security and the role of cloud architects and DevSecOps in ensuring secure cloud environments.
The conversation covers various topics related to cloud computing, security, and the future of Azure.
The main themes include the importance of writing secure code, the challenges of integrating security into the development process, the rise of DevSecOps and GitOps, the comparison between Azure and other cloud providers, the future of AI and data platforms, and Microsoft's open-minded approach to multi-cloud and open source.

CHAPTERS
(00:00:00) Introduction and Background
(00:07:00) Privatization of PaaS Services
(00:15:00) Cloud Repatriation: Trends and Considerations
(00:29:30) Challenges of MLOps and Data Platforms
(00:35:55) Continuous Learning and Keeping Up
(00:45:34) Microsoft's Open-Minded Approach
...more
48min
July 11, 2024 S01E03 Building Trust in the Digital Age: Insights on Cybersecurity and Cloud - Mike Bursell
Mike Bursell, a cybersecurity expert and author of the book 'Trust in Computer Systems and the Cloud,' discusses the concept of trust in the digital world.
He explores the definition of trust, the challenges of trust in computer systems and the cloud, and the emerging trend of zero trust. He also delves into the importance of a trusted computing base, the role of hardware security modules (HSMs), and the potential of confidential computing.
Additionally, he discusses the relationship between open source and trust, the future of blockchain, and his upcoming projects.
CHAPTERS
(00:00:00) Introduction and Background of Mike Bursell
(00:06:22) The Rise of Confidential Computing
(00:12:31) The Role of Open Source in Trust
(00:30:27) Upcoming Projects and Research
...more
39min
July 02, 2024 S01E02 Mastering Cybersecurity: Navigating Privacy Laws and Compliance - Walter Rocchi
Walter Rocchi, an ISO 27001 Lead Implementer and Lead Auditor, to discuss the importance of cybersecurity and privacy in European organizations.

We talk about continuous improvement and training to ensure effective security measures.
We compare the European mindset toward privacy and data protection with other continents, discuss the challenges of balancing European innovation and regulation, investigate the importance of frameworks like ISO 27001 and NIST in ensuring cybersecurity and data protection.

We also touch on the relevance of cloud security and the role of information security officers in understanding cloud security and AI security.

Then we conclude with a discussion on the current legal framework for exchanging personal data of European citizens with the US and the importance of technical controls in data protection.
Enjoy!

CHAPTERS
(00:00:00) Introduction and Professional Background
(00:08:31) The Evolution of Information Security and Privacy Risk Categories
(00:24:12) Addressing the Gap Between Certification and Security Improvement
(00:30:59) The Use of Frameworks in Different Countries
(00:45:12) The Role of Information Security Officers in Cloud Security
(00:53:28) The Current Legal Framework for Data Exchange between the EU and the US
(01:01:13) The Future of Security and Privacy in Europe
...more
1h 4min
June 27, 2024 S01E01 Mastering Cloud Migration: Strategies for Seamless Transitions - Jonah Andersson
This first episode of the BlueDragon Podcast delves into the transformative world of cloud computing, featuring insights from industry expert Jonah Andersson. We discuss the evolution of Azure, cloud adoption trends, and the foundational knowledge necessary for leveraging cloud technologies effectively.
CHAPTERS
(00:00:00) Introduction and Overview
(00:06:16) Cloud Adoption and Attitude of Organizations
(00:12:40) Auto Scaling and Benefits of Cloud
(00:24:28) Challenges and Benefits of Cloud Repatriation
(00:36:01) The Importance of Cloud Security
(00:40:24) The Evolving Role of Cloud Solution Architects
(00:50:23) Jonah's Journey: Writing and Publishing a Book on Azure
...more
53min

FAQs about BlueDragon Podcast:

How many episodes does BlueDragon Podcast have?

The podcast currently has 17 episodes available.