Cloud Security:Lessons Learned

Alejandro (Alex) Buschel – Principal Consultant

Cisco Security Services

Security Advisory

BSOGEN-1002

Thursday 29 – 8:30-9:30

© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public

Cisco Spark

Questions? Use Cisco Spark to chat with the speaker after the session

1. Find this session in the Cisco Live Mobile App

2. Click “Join the Discussion”

3. Install Spark or go directly to the space

4. Enter messages/questions in the space

How

cs.co/ciscolivebot#BSOGEN-1002Cisco Spark spaces will be available until July 3, 2017.

• Current Trends

• Lessons Learned

• Call to Action

Agenda

© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public

Pop Quiz

BSOGEN-1002 5

Current Trends

© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public

The Cloud Adoption Wave

© 2017 Cisco and/or its affiliates. All rights reserved. Cisco PublicBSOGEN-1002 7

© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public

Relevant Cloud Trends

Dynamism

Containerization

Serverless Architecture

DevSecOps© 2017 Cisco and/or its affiliates. All rights reserved. Cisco PublicBSOGEN-1002 8

Lessons Learned

© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public

Lessons Learned

Lesson #1:

Close the

Knowledge

Gap

© 2017 Cisco and/or its affiliates. All rights reserved. Cisco PublicBSOGEN-1002 10

Technology

Best Practices

DevSecOps

Compliance

Strategy

© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public

Strategy

BSOGEN-1002 11

StrategyBest

PracticesCompliance Technology DevSecOps

• Understand the new span of control for Cloud environments

• Set expectations with internal stakeholders

• Create ongoing engagement channels

© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public

Best Practices

• Instrument Visibility

• Build Controls

• Integrate your workflows

BSOGEN-1002 12

StrategyBest

PracticesCompliance Technology DevSecOps

© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public

Compliance

BSOGEN-1002 13

StrategyBest

PracticesCompliance Technology DevSecOps

• Understand the impact of EU’s General Data Protection Regulation (GDPR)

• Improve your Audit Readiness

• Consolidate your compliance controls

© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public

Technology

BSOGEN-1002 14

StrategyBest

PracticesCompliance Technology DevSecOps

• Stay informed about new capabilities

• Understand your weaknesses

• Embrace new ways of connecting environments

© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public

DevSecOps

BSOGEN-1002 15

StrategyBest

PracticesCompliance Technology DevSecOps

• Integrate Security into Dev and Ops workflows

• Provide code and configuration patterns

• Automate: Eliminate drift

• Define an education plan

© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public

Lessons Learned

Lesson #2:

Evolve Your

Operating

Model

Agile Governance

DevSecOps

Monitoring and Analytics

© 2017 Cisco and/or its affiliates. All rights reserved. Cisco PublicBSOGEN-1002 16

© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public

Lessons Learned

Lesson #3:

Take

Advantage of

Cloud

Self-Protecting Applications

Virtual Infrastructure

Dynamic Networking

© 2017 Cisco and/or its affiliates. All rights reserved. Cisco PublicBSOGEN-1002 17

Call to Action

Secure Cloud Adoption Framework

We Are Here to Help You

Take Advantage of Cloud

Mind the Knowledge Gap

Evolve Your Operating Model

Understand and Perform the Basics

© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public

• Give us your feedback to be entered into a Daily Survey Drawing. A daily winner will receive a $750 gift card.

• Complete your session surveys through the Cisco Live mobile app or on www.CiscoLive.com/us.

Complete Your Online Session Evaluation

Don’t forget: Cisco Live sessions will be available for viewing on demand after the event at www.CiscoLive.com/Online.

© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public

Continue Your Education

• Demos in the Cisco campus

• Walk-in Self-Paced Labs

• Lunch & Learn

• Meet the Engineer 1:1 meetings

• Related sessions

BSOGEN-1002 21

Thank you