Hacking Your Security Culture for the Cloud

Explore how security teams can adapt to cloud adoption in this 45-minute RSA Conference talk. Learn about the challenges and necessary transformations in security culture, skills, and talent recruitment as infrastructure becomes code. Discover Liberty Mutual Insurance's journey, including early misconceptions, paradigm shifts, and the development of new approaches like radar architecture and offensive security teams. Gain insights into managing failure risks, implementing governance as an enabler, and preparing for the future of SecOps in cloud environments.

Intro
Liberty Mutual
Liberty by the numbers
An early (mistaken) understanding of the Cloud
The classic InfoSec mindset
Early steps: Drawing some wrong conclusions
Thinking differently
Implications for security: Two paradigms shift
But the Cloud is more complicated!
Radar architecture
Our goal: Managing the blast radius of failure
Offensive Security: Red, Blue, and Purple Teams
Governance as an enabler
The future of SecOps: Behind the 8 ball...
Hacking our culture