In this episode of the Virtual Coffee with Ashish edition for Cloud Security Podcast, we spoke with Alexander J Yawn - ISC2 Miami Board Member | NABCRMP Founding Board Member
In this episode, AJ & Ashish spoke about
- What was your path into CyberSecurity?
- What does Compliance in Cloud mean for you?
- What is Shared Responsibility?
- How is Compliance different in a Hybrid world?
- For anyone who used to audit on-premise, is it difficult to audit cloud environments?
- There are so many AWS services for security, are those for monitoring or audit?
- Do Auditors need to be technical like Cloud Engineer to be successful as an auditor in Cloud?
- Auditors should be open to the idea of learning cloud?
- Do Auditors need to be Certified Architect?
- What are the some of the easy things to knocks off to start building foundation stuff?
- Is there a recommended time frame between audits in a cloud world?
- Can this Compliance task be automated?
- How is the GuardDuty report different to Trusted Advisor Report?
- Is there a company mandate to check these security services?
- What advice can you provide for preparing for an audit against specific compliance framework?
- Does a point in time check make sense in cloud?
- Does the cloud provider provide advice to their customer when they are not secure?
- How does compliance scale from a startup to an enterprise?
- Is there additional cost for multiple AWS Accounts?
- Where can auditors go to know more about doing Audits on Cloud?
ShowNotes and Episode Transcript on www.cloudsecuritypodcast.tv
Twitter - @kaizenteq @hashishrajan
If you want to watch videos of this and previous episodes:
- Twitch Channel: https://lnkd.in/gxhFrqw
- Youtube Channel: https://lnkd.in/gUHqSai
