Architecting a Secure Cloud Framework

Explore key principles for architecting a secure cloud framework in this NDC Oslo 2023 conference talk. Delve into the challenges of maintaining security in an ever-changing threat landscape, addressing system complexity, connectedness, and diverse user bases. Learn about high-level security principles, the impact of hybrid environments, evolving processes and architectures, and the shifting threat landscape including multicloud and API attacks. Examine shared responsibility models, changing roles, and the human factor in cloud security. Discover adoption models, modernization strategies, DevSecOps practices, and common anti-patterns to avoid. Gain insights into industry standards, landing zones, compliance, and Azure Policy. Master essential capabilities such as identity management, password security, connectivity, encryption, API protection, logging, monitoring, and posture management. Walk away with practical examples and best practices to enhance your cloud security architecture for any environment.

Introduction
Agenda
Who am I
Highlevel principles
We suck
What happened
What has changed
Hybrid environments
Changing processes architectures
Threat landscape
Multicloud threats
API attacks
Capabilities
Shared responsibility
Changing roles
The human side
Adoption models
Modernising
What cant do it
Devsecops
Antipatterns
What do you do
Best practices
Industry standards
Landing zones
Compliance
Azure Policy
Capabilities you should know
Identity
Passwords
Connectivity
Encryption
API Protection
Logging Monitoring
Examples of Logging
Posture Management
Summary
Outro