Guest:

  • Heather Adkins, Sr Director, Information Security @ Google

Topics:

  • Your RSA presentation has 3 pillars: zero trust, microservices, automation/zero prod, is this all you need to be secure & reliable in the modern world?
  • Let’s drill down again into the “secure and reliable” concept, are you sure that they are interrelated?
  • Is there a risk that microservices could actually increase attack surface?
  • What are the practical security upsides of “no touch production”?
  • SRE and DevOps revolutionized IT, can we expect a similar revolution for security? Where would it come from?

Resources:

  • “Building Secure and Reliable Systems” RSA 2021 presentation by Heather Adkins
  • “Building Secure and Reliable Systems” book (free)
  • “Modern Threat Detection at Google” (ep 17)
  • Google BeyondCorp
  • Google BeyondProd
  • NIST 800-27 “Zero Trust Architecture”