Attendees

Guest: Beau Woods

Guest title:  Member

Company:  We-Are-The-Cavalry, Atlantic Council

Abstract

IOT devices such as Medical embedded devices, autonomous vehicle and smart homes are currently the Achilles heel of information security. The technology is advancing fast, but the security frameworks are not advancing at the same pace. In this episode we talk with Beau woods, founder for I-am-the-cavalry, about the steps governments, regulators and vendors should take in order to produce safer IOT devices.

Timing

0:00

Intro and introducing our Beau activities and I-AM-The-Cavalry community  

5:20

What are the unique challenges of IOT security? 

9.05 

It is not a question of connectivity

11:35  

How do better engineer IOT devices - fail fast, detect failure and maintain an ability to fix failures

17.15

Engineering is not enough - how the IOT consumers should be trained for and aware of

22.20

Summary and conclusions

Attendees

Guest: Damir Savanović

Guest title: Senior researcher

Company: Cloud Security Alliance

Abstract

Creating trust is one of the major challenges for cloud providers and consumers, without trust customers will not be able to move workloads into cloud environments, but trust is a very elusive term that is hard to achieve. In  this episode we talk with Damir Savanović from the Cloud Security Alliance on how cloud providers and consumers can use certifications for increasing trust and how is CSA preparing to the new requirements of continuous monitoring that are arriving with the new EU cyber laws.

Timing

0:00

Intro and introducing our guest and overview of Damir activities in the area of cloud security

5:40

Introducing Cloud Security Alliance activities and major projects (STAR and CCSK)

9.17 

The true meaning of trust in cloud computing. Using attestation and certification for establishing trust

14:50  

The difference between certification and attestation and the effect of the new EU cybersecurity law on compliance

17.50

Understanding CSA STAR methodology from self assessment to certification or attestation and continuous monitoring

24.20

Behind the scenes of continuous monitoring - the CSA STAR methodology 

32.00

Summary and conclusions

Attendees

Guest: Olaf Streutker

Guest title: CISO Advisor

Company: ABN Amro

Abstract

The Cloud Octagon Model is a new framework for cloud adoption (mostly SaaS adoption). The model was designed in cooperation between ABN-Amro and the Cloud Security Alliance and assists organizations to identify, represent, and assess risks in the context of their cloud implementation across multiple factors by introducing a logical approach to holistically dealing with security aspects involved in moving to the cloud.

Link to CSA Cloud Octagon Model:

https://cloudsecurityalliance.org/artifacts/cloud-octagon-model/

Timing

0:00

Intro and introducing the guest and ABN Amro cloud adoption methodology

12:10

The evolution of the Cloud Octagon Model and basic concepts

11:28 

How ABN-Amro are dealing with IaaS/PaaS vs. SaaS

15:30

The different phases of the Cloud Octagon Model: Classification

20.30

Core banking applications in the cloud

24.20

The different phases of the Cloud Octagon Model

31.20

Summary and conclusions