What processes do you rely on to address risks from rogue cloud tenants that the security team doesn’t have visibility of?

Threat Intelligence & Incident Response Threat & Vulnerability Management

2k views2 Comments

Sort by:

Director of Information Security in Finance (non-banking)7 months ago

I do not agree to @Adel Awad, it's not the Security that has to have the right to create new infrastructure in the cloud, but there has to be one dedicated and responsible team for the environment.
Architects build systems and services
Infrastructure team build templates for the container or cloud services
Security approves that
DevTeams just use templates and are not allowed to define their own infrastructure
CI/CD is an automated one-way street to PROD and the only way into it.
No interaktive service in PROD, if there is an error in PROD, fix it in DEV and start CI/CD

CIO in Banking7 months ago

You need to lockdown your cloud environment so that only the cybersecurity team is allowed to create an environment under your domain ownership, you also need to monitor the attack surface , such as storage buckets exposed to the outside world , lack of conditional access , etc… there are solutions that helps you monitor cloud security (Cloud Security Posture Monitoring)

Content you might like

What can organizations do to mitigate risks from Windows 10 devices that can’t be upgraded to Windows 11, like industrial control systems (ICS)?

Are you concerned that potential cuts to CISA’s funding/headcount (in the proposed Fed budget for 2026) could lead to increased cyber risks to your org?

Extremely concerned8%

Very concerned33%

Moderately concerned56%

Slightly concerned3%

Not at all concerned

View Results

What’s your “hot take” when it comes to security questionnaires?

Are you seeing changes in the quality or speed of threat intelligence from sources you relied on in previous years? Can you share how you are being impacted so far by the uncertainty around public-private partnerships for cyber information sharing?

In the next 6 months, which will your company do?

Invest more in eCommerce34%

Maintain the current investment in eCommerce60%

Invest less in eCommerce4%