BSidesATL 2020 - Detect: Conquering the Cloud: Defense-in-Depth Strategies for Amazon Web Services
Channel: BSidesATL
Date: 2020-04-17

Poor credential management, mis-configuration, and insider threat are the top causes of Cloud Infrastructure data breaches according to global research and advisory firm, Gartner. 
In the past two years, the US Department of Defense, US Central and Pacific Command, Accenture, GoDaddy, FedEx, and Cisco all encountered data breaches/unauthorized disclosures due to AWS misconfigurations. 

This talk focuses on strategies for implementing defense in depth within Amazon Web Services, the most widely used of the cloud Infrastructure-as-a-Service providers. 

Shane is the Director of Cyber Risk and CISO Advisory Services for the Atlanta based cyber risk management firm, risk3sixty LLC. Shane specializes in helping organizations navigate the complexities of cybersecurity, information risk and compliance. His experience includes acting as fractional CISO for numerous high growth organizations, developing information security and compliance programs, and leading technical cyber risk and penetration testing engagements.