The Cloud Security Mindset: Recent Episodes
Rich Mogull
A show where we explore how interesting security professionals think. To learn how they succeed, handle failure, and respond to the disruptive forces facing security today.
We are breaking our format in this special episode where Mike interviews Rich on Covid-19 and disaster response. Rich is a nationally certified Paramedic with nearly 20 years experience responding to disasters for the federal government, including responses to Katrina and Puerto Rico for Maria. For around 10 years he was part of a (now defunct) federal team dedicated to WMD response, including bioterror and pandemics. We spend an hour discussing Rich's thoughts on preparedness and the key indicators and triggers he uses to prepare himself, his family, and to guide his responses to potential and active disasters.
In part 2 of our interview with Jonathon Poling we delve deeper into his process for preparing for and responding to incidents in the cloud. Once again we want to thank DisruptOps for sponsoring this week's episode. You can find more information at https://disruptops.com
This week our guest is Jonathon Poling. Jonathon is a Managing Principal Consultant for Digital Forensics and Incident Response (DFIR) at Secureworks who specializes in cloud. We met in a cloud security slack and i recruited Jonathon to speak in the cloud track at RSA after seeing him release some excellent content on cloud monitoring for incident response. In this first episode he shares how he first became interested in cloud after years of traditional incident response. He shares when he first realized why cloud is so different from traditional infrastructure with both new challenges and opportunities. We then spend some time talking about multi-cloud and what it really means for organizations. What I love about this episode is how he shares his thought process. Not just how cloud is different, but why he came to believe its different.
NOTE: We received feedback that there is an editing error and around 30 seconds of overlapping audio around 22 minutes in. Due to moving the source files around this isn't an easy fix so while we will get to it, that glitch may be there for a while. We are really sorry. In the second part of our interview with Wendy Nather we delve further into the concepts of "zero trust" and why that isn't necessarily the best of terms in the first place. Wendy also discusses how aspects of her personal life affect her decision making and approaches to her profession. This episode is sponsored by DisruptOps, the leader in automating cloud security operations.
In our inagural episode of the Cloud Security Mindset we were honored to interview Wendy Nather. Wendy is a core member of the security community known for bringing a realistic perspective to security problems, based on an incredibly diverse career. In this episode we talk with Wendy about some of her early experiences and thoughts on cloud computing and how she looks at tackling tough security problems if she were ever forced to be a CISO (which is right up there with prison in her mind).