Guest:

  • Jay Thoden van Velzen, Strategic Advisor to the CSO, SAP

Topics:

  • What are the challenges with shared responsibility for cloud security?
  • Can you explain "shared" vs "separated" responsibility?
  • In your article, you mention “shared faith”, we have “shared fate”, but we never heard of shared faith. What is this? Can you explain?
  • What about the cloud models (SaaS, PaaS, IaaS), how does this sharing model differ?
  • While at it, what is cloud, really? [yes, we really did ask this!]

Resources:

  • LinkedIn post and Blog
  • EP132 Chaos Engineering for Security: How to Improve Software Resilience with Kelly Shortridge
  • “Security Chaos Engineering” book
  • Shared responsibility failures blog
  • Shared fate at Google Cloud (also see blogs one and two)
  • National Cyber Security strategy