Important Update: SANS Community Night Manila Cancelled due to AMCHAM Venue Closure.
SANS Community Nights are a great way to stay in touch with your local InfoSec community and to hear the latest in technical wizardry, industry intelligence, and thought leadership from our amazing instructors.
Join us at:
Corinthian Plaza Building, Second Floor, AmCham Philippines - Robert Sears Hall, 121 Paseo de Roxas, Makati City 1229, Metro Manila.
View the agenda below:
Thursday 25th July 2024
6:00 – 6:30 pm
Registration and Drinks
6:30 – 7:30 pm
Presentation
Title:
Prevent Cloud Incidents from Becoming Cloud Breaches presented by SANS Certified Instructor Brandon Evans.
Abstract:
The number of cloud security breaches in the headlines have been staggering lately. It seems like a week cannot go by without a massive amount of sensitive data being leaked from either AWS, Azure, or Google Cloud.
One example that would be funny if it were not so sad is the September 2023 incident where the Microsoft AI team leaked 38TB of sensitive data, including employee workstation backups and 30,000 internal Teams messages, due to a misconfigured storage configuration. How is the industry failing to use the clouds properly, let alone Microsoft, the extremely mature company who created Azure in the first place?
Join Brandon as he shares his analysis on this trend. He will discuss the unique challenges of protecting the cloud, why the cloud providers are unable to solve these problems alone, why multicloud makes matters even more difficult, and how your organisation can take practical measures to mitigate the impact of cloud incidents. The presentation will include case studies of real breaches that were made much worse due to a lack of defense-in-depth. Learn how to prevent real attacks with controls that matter.
Learning objectives: You will learn:
- Why the vast majority of breaches are in the cloud.
- Why the cloud is largely insecure by default.
- How to calculate the effort to secure multiple cloud providers.
- How you cannot solve these challenges with standardisation and cloud agnosticism alone.
- About multiple cloud security incidents that went from bad to worse because of a lack of cloud controls.
- High-level best practices for mitigating the impact of cloud incidents
This Community Night is based on content from SANS Institute SEC510: Cloud Security Controls and Mitigations. SEC510 provides cloud security analysts, engineers, and researchers with practical security controls that can help organisations reduce their attack surface and prevent security incidents from becoming breaches. To learn more, review the syllabus, and click the Course Demo button for a free peak at the courseware.
