Cloud Security Reinvented

Cloud computing is changing the world as we know it. So what impact does it have on the world of security?

Jonathan Jaffe is the Chief Information Security Officer at Lemonade, a full-service consumer insurance company powered by artificial intelligence and behavioral economics and driven by social good. After years of experience in information security and cybersecurity, he made the transition to the cloud through a San Francisco startup in 2018, and then in 2020 landed at Lemonade, where it's all cloud and technology.

In this episode of the Cloud Security Reinvented podcast, host Andy Ellis and Jonathan Jaffe discuss how the world has changed since the rise of technology and the prevalence of the cloud. They also talk about growth opportunities in the security industry and the power of automation. Tune in to find out more about the post-cloud security era.

_______________________________

Guest-at-a-Glance

💡 Name: Jonathan Jaffe

💡 What he does: He's the Chief Information Security Officer at Lemonade, a full-stack insurance company powered by AI and behavioral economics and driven by social good.

💡 Company: Lemonade

💡 Noteworthy: Jonathan's career in security started in 1997 with doing deployments of Netscape servers, LDAP servers, email servers. Then he did about 20 years of Identity and Access Management consulting until he finally landed at Lemonade in 2020.

💡 Where to find Jonathan: LinkedIn

_______________________________

Key Insights

⚡ Cloud has made the world of security more fun. Jonathan is excited to see new technologies emerging in the world of security, and the cloud is certainly responsible for this new era coming to light. He says cloud security is now more complex but, at the same time, more fun. "Cloud has made going from standing in data centers late at night and plugging in cables to now working with really cool technologies that are changing regularly. Much, much more fun!"

⚡ Don't be afraid to play with technology. Jonathan has been in the security industry for a long time and certainly knows his way around it. So what piece of advice would he give to someone who's just starting out? He says to embrace technology. "Encouragement to play with as much new technology as soon as possible to be familiar with the things that are going to stick and the things that aren't, certainly gives you a competitive advantage in your career."

⚡ Automation is the future. According to Jonathan, automation will continue to play a major role in the field of security in the years to come. Not only does it represent our future, but it's also a huge growth opportunity. "I wasn't expecting automation before I got into cloud, but it's pretty often, pretty obvious that you need it once you start dealing with the scale."

This podcast is hosted by Orca Security

Cloud computing is changing the world as we know it. So what impact does it have on the world of security?

Jonathan Jaffe is the Chief Information Security Officer at Lemonade, a full-service consumer insurance company powered by artificial intelligence and behavioral economics and driven by social good. After years of experience in information security and cybersecurity, he made the transition to the cloud through a San Francisco startup in 2018, and then in 2020 landed at Lemonade, where it's all cloud and technology.

In this episode of the Cloud Security Reinvented podcast, host Andy Ellis and Jonathan Jaffe discuss how the world has changed since the rise of technology and the prevalence of the cloud. They also talk about growth opportunities in the security industry and the power of automation. Tune in to find out more about the post-cloud security era.

When it comes to information security and technology, Drew Daniels is the person to talk to. After over two decades of experience in the industry, Drew is now in charge of information technology and security as both the CIO and CISO at Druva. He believes information security can be a business driver as important as providing strong leadership.

Having been in the industry before cloud computing, he's also knowledgeable about the best pre and post-cloud practices. However, despite his long experience and large expertise, Drew is no stranger to struggles at work.

___________________________

Guest-at-a-Glance

💡 Name: Drew Daniels

💡 What he does: Drew is the Chief Information Officer (CIO) & Chief Information Security Officer (CISO) at Druva, the global leader in Cloud Data Protection and Management.

💡 Company: Druva

💡 Noteworthy: He has been in information security for about 21 years, and he's also an angel investor, independent board member, advisor to companies on funding, security to help them get off the ground successfully.

💡 Where to find Drew: LinkedIn

___________________________

Key Insights

⚡ Balancing between the CIO and CISO roles is a challenge. Drew says that though these two roles don't always align, they present an interesting challenge. According to him, it's fun wearing both hats. "I have to be responsible for service delivery at Druva and making sure that our employees and our applications are running, available, and enabling the business. But at the same time, thinking about how I secure those things so that those end-users, customers, and the data that resides in those applications are secure and protected. It's a really interesting challenge some days. I have to think about it from an availability standpoint. Other days, I have to think about it from a security standpoint, and there are still days where I have to be keeping both things in my head."

⚡ Change control process has persistently hung on even in the post-cloud era. Drew struggled the most with the change control process as both the CISO and CIO. He says he expected it to go away because it didn't make sense in such an ephemeral world, but it has persisted nonetheless. "I fight with auditors, and I fight with traditional IT personnel around change control because they're like every time I see a policy on change control, it talks about change control, approval board, and things like that. And I'm like, 'We can't do that. Things are moving too fast.'"

⚡ Collaboration is key. When people don't communicate, they risk compromising the quality of their work. Drew talks about the challenges people in security face when it comes to consistent collaboration. "People I know in the industry, engineers, and developers, what I hear from them over and over again is when that happens, they work to get around, avoid, ignore the advice of those security teams, which makes the security team's job so much harder."

Regardless of the industry, most people agree that the cloud era has taken business processes to a whole new level. However, not all industries, including the airline industry, take advantage of cloud technologies as they should.

In today's episode of Cloud Security Reinvented, it is our pleasure to welcome Deneen DeFiore. Deneen is the VP and CISO at United Airlines. She is here today to talk about the importance of using cloud technologies and share her thoughts about the future of technology in general.

Deneen and our host, Andy Ellis, also discuss the best and worst practices from the pre-could era, emphasizing the importance of Identity and Access Management.

Deneen shares a valuable piece of advice to anyone at the beginning of their career. She says skills and knowledge are crucial; expertise brings credibility, but nothing is more important than building solid relationships.

💡 Name: Deneen DeFiore

💡 What she does: Deneen is the VP and CISO at United Airlines.

💡 Websites: United Airlines

💡 Noteworthy: Prior to joining United Airlines, Deneen was part of General Electric (GE). The first half of her career was based on technology and infrastructure process improvement roles. And then, she focused on building the cybersecurity program at GE from a corporate standpoint and then at the aviation business.

💡 Where to find Deneen: LinkedIn

__________________________________________________

Key Insights

⚡ Cloud technologies can help us be more efficient in real-time. According to our guest, cloud technologies have made data available. Now, people who work with data can, if needed, access it anytime, anywhere. However, not all industries, including the airline industry, enjoy the benefits of cloud technologies. ''I don't think we're taking advantage of that as much as we can. I think if you're on the line and you're trying to do maintenance, and you need a piece of information on a standard operating procedure, we're making strides there. And in other industries, it's closer, but not so much in aviation.''

⚡ Building relationships matters. When you are at the beginning of your career, you try to gain as many skills as possible. However, as our guest states, the skills and knowledge you possess are crucial but don't forget true success comes from relationships you build. ''One of the things I think early on in my career is I depended on skill sets and knowledge; I needed to be the expert. And that was great because you do gain countability around the knowledge; you bring in the skills to whatever situation or problem you're trying to solve. But the other flip part of that is, yes, you have to have the skillset, but relationships matter so much as well too. You have to be able to not only get confidence because you know what you're doing, but the how you're doing, and people trust you to do the right thing.''

⚡ It's all about gaining customer trust. Regardless of the industry, customer expectations and experiences should be your number one priority. The core mission of every airline company is to connect the world and ensure people arrive safely from point A to point B. ''As you think about how business models are evolving, not only in my business where customers implicitly trust you to get them from point A to point B safely without any service disruptions. So that means managing that customer experience and expectation is part of your job. I would encourage people as they think about getting into cybersecurity or do their job, how do they relate it to the mission and purpose, and vision of whatever company they're at because it makes it a lot more fulfilling and a lot more exciting to do that way.''

This podcast is hosted by Orca Security

We live in an era where cloud systems have beaten on-premise services. Most businesses have switched to the cloud infrastructure due to its advanced security and other useful features, but what about healthcare? How do they choose to protect and manage their systems?

Meet Ben Waugh, the Chief Security Officer at Redox, a cloud-native medical platform for people who are building healthcare applications. Throughout his career, Ben has been helping different organizations move to the cloud, and cloud migration is the field he specializes in. Therefore, he can provide significant insights into the role of the cloud in the industries such as healthcare, the field that still abides by the traditional technology rules.

Tune in to the new episode of Cloud Security Reinvented to hear Ben Waugh and Andy Ellis discuss the great role the cloud plays today, the opportunities it provides, and the importance of not forgetting the basics when trying to solve more sophisticated threats.

Regardless of the industry, most people agree that the cloud era has taken business processes to a whole new level. However, not all industries, including the airline industry, take advantage of cloud technologies as they should.

In today's episode of Cloud Security Reinvented, it is our pleasure to welcome Deneen DeFiore. Deneen is the VP and CISO at United Airlines. She is here today to talk about the importance of using cloud technologies and share her thoughts about the future of technology in general.

Deneen and our host, Andy Ellis, also discuss the best and worst practices from the pre-cloud era, emphasizing the importance of Identity and Access Management.

Deneen shares a valuable piece of advice to anyone at the beginning of their career. She says skills and knowledge are crucial; expertise brings credibility, but nothing is more important than building solid relationships.

_________________________

Guest-at-a-Glance

💡 Name: Deneen DeFiore

💡 What she does: Deneen is the VP and CISO at United Airlines.

💡 Websites: United Airlines

💡 Noteworthy: Prior to joining United Airlines, Deneen was part of General Electric (GE). The first half of her career was based on technology and infrastructure process improvement roles. And then, she focused on building the cybersecurity program at GE from a corporate standpoint and then at the aviation business.

💡 Where to find Deneen: LinkedIn

_________________________

Key Insights

⚡ Cloud technologies can help us be more efficient in real-time. According to our guest, cloud technologies have made data available. Now, people who work with data can, if needed, access it anytime, anywhere. However, not all industries, including the airline industry, enjoy the benefits of cloud technologies. ''I don't think we're taking advantage of that as much as we can. I think if you're on the line and you're trying to do maintenance, and you need a piece of information on a standard operating procedure, we're making strides there. And in other industries, it's closer, but not so much in aviation.''

⚡ Building relationships matters. When you are at the beginning of your career, you try to gain as many skills as possible. However, as our guest states, the skills and knowledge you possess are crucial but don't forget true success comes from relationships you build. ''One of the things I think early on in my career is I depended on skill sets and knowledge; I needed to be the expert. And that was great because you do gain countability around the knowledge; you bring in the skills to whatever situation or problem you're trying to solve. But the other flip part of that is, yes, you have to have the skillset, but relationships matter so much as well too. You have to be able to not only get confidence because you know what you're doing, but the how you're doing, and people trust you to do the right thing.''

⚡ It's all about gaining customer trust. Regardless of the industry, customer expectations and experiences should be your number one priority. The core mission of every airline company is to connect the world and ensure people arrive safely from point A to point B. ''As you think about how business models are evolving, not only in my business where customers implicitly trust you to get them from point A to point B safely without any service disruptions. So that means managing that customer experience and expectation is part of your job. I would encourage people as they think about getting into cybersecurity or do their job, how do they relate it to the mission and purpose, and vision of whatever company they're at because it makes it a lot more fulfilling and a lot more exciting to do that way.''

One of the aspects where we can see how much the technology has progressed is the cloud system. Cloud has become more prevalent than on-premise IT infrastructure, mainly since it is more secure and more reliable than it used to be at its very first beginnings. But how is it like to be a part of cloud security systems, or, better said, a CSO?

Ty Sbano is the Chief Security and Trust Officer at Sisense. His career journey has been pretty rich and interesting and has helped him determine his end goal: becoming a CSO. Being CSO can be stressful, which is why Ty suggests that one must be ready for the stress before committing to cybersecurity. Aside from coping with all the stress and challenges that come with cloud security, it is fundamental to have a strong mentor who will help you go through the entire process.

In this episode of Cloud Security Reinvented, Ty Sbano and Andy Ellis have an insightful conversation about the basic concepts of cloud security, data analytics, risk management, and other essential aspects future CSOs will find incredibly handy.