Csa summit argentina-reavis

Jim Reavis, CEO

June 2016

The Mandate for Global Cloud Security

About Jim Reavis

CEO and Founder of Cloud Security Alliance

25 years experience in information security

Honored to be a presenter at the inaugural CSA Argentina Summit

We will never “solve” information security…

State of permanent warfare

Battlefields change

Weapons change

Create enough security to ensure a profitable outcome

Tech consumerization…Changing compute, changing the world

CSA Maxims

As IT moves into the Cloud, so must Security

As IT loses control of the endpoint, Cloud is the only Security option

As the Internet of Things scales upwards, Cloud computing will be its data repository, application engine, provisioning system, Security platform and organizing concept

Security has a new battlefield

CSA Top Threats to Cloud for 2016

7. APTs8. Data Loss9. Due Diligence10.Nefarious Use and

Abuse11.Denial of Service12.Shared Technology

Issues

1. Data Breaches2. Compromised

Credentials and IAM3. Insecure APIs4. System and App

Vulnerabilities5. Account Hijacking6. Malicious Insiders

https://cloudsecurityalliance.org/group/top-threats/

Cloud in the Enterprise 2016

Awareness: Capturing data on current cloud usage within organizationOpportunistic: Identifying strong cloud adoption opportunities (Cloud First!)Strategic: Building cloud adoption program – security program, architecture, frameworks & business alignment

CSA Global Enterprise Advisory Board

Announced at CSA Summit @ RSAChaired by Vinay Patel, Head of Security, Citi Infrastructure, CitigroupPublic facing, demonstrate enterprise support of CSA publiclyIssue public “Calls to action” for industryAdvise CSA on strategyIssue annual “State of Cloud Security” report

https://cloudsecurityalliance.org/download/state-of-cloud-security-2016/

Citigroup, Johnson & Johnson, Caterpillar, Hertz, Lucasfilm, ADP, Coca Cola, United Healthcare and several others

Are Cloud Providers Secure?Uneven: Terrific Tier 1 Cloud Provider Security coexists with Poor and Unknown Provider Security

Secure Provider + Mature Customer may not equal secure relationship

Poor Integration & Alignment, e.g. Bring Your Own KeysCommunication Gaps, e.g. sharing event infoEnterprises want a holistic risk-based view of IT with Cloud as a seamless extension

Greater transparency will help enterprises close the gaps

Cloud Providers Must Make Cooperation a Priority

Threat intelligence and incident sharingTransparency on verifiable controls with strong integrity checksStandards development on common security requirementsSupport for multi-vendor enterprise

Cloud is Changing the Very Nature of Information Security

Servers are Dead, Long Live Services!

APIs, Automation, Agility, Disposable Infrastructure

SDN, IoT, Analytics, CASB

Better Ways to Handle Old Problems

Fight the Legacy Mindset

National, Regional & Industry-Specific Regulations Provide Important Challenges

Policies rapidly outdated by technology changesDuplicative nature of many regulationsConflicting regulationsGlobal nature of enterprises and cloud providers vs regional regulatory authoritiesKnowledge gaps for regulators and auditors in addressing cloud computing

Engagement with Regulatory Decision Makers Key

Industry Skills Gap

One million unfilled information security jobsLagging skillsets among the employed

What have leading organizations learned?Understanding different types of Clouds and your RoleDue diligence is critical, Data is key Identity is very importantForcing legacy tools & architectures on cloud security problems doesn’t workHeavy-handed blocking of cloud services backfires on infosecKey role of intermediaries (Cloud Access Security Broker)

Think Virtually!

How CSA delivers the secure cloud

About the Cloud Security Alliance

Global, not-for-profit organizationBuilding security best practices for next generation ITResearch and Educational ProgramsCloud Provider Certification – CSA STARUser Certification - CCSKThe globally authoritative source for Trust in the Cloud

“To promote the use of best practices for providing security assurance within Cloud Computing, and provide education

on the uses of Cloud Computing to help secure all other forms of computing.”

CSA Fast FactsFounded in 2009 Membership stats as of June 2016

75,000 individual members, 80 chapters globally330 corporate members

Operates in 3 DivisionsCSA Americas headquarters in SeattleCSA APAC, headquarters in SingaporeCSA Europe (responsible for Europe/Middle East/Africa), headquarters in Edinburgh UK

Over 30 research projects in 25 working groupsStrategic partnerships with governments, research institutions, professional associations and industrywww.cloudsecurityalliance.org

CCSK – User Certification

Certificate of Cloud Security Knowledge (CCSK)

Benchmark of cloud security competencyBased on CSA guidanceOnline web-based examinationwww.cloudsecurityalliance.org/education/ccsk/ Partnered with (ISC)2 to develop complementary certification: CCSPClose cloud security knowledge gaps

CSA STAR Provider CertificationCSA STAR (Security, Trust and Assurance Registry), 3 Level

Provider Certification ProgramManaged by CSA in partnership with world leading ISO certification bodies and audit firmsAdopted Worldwide by Providers, Enterprises and Governments www.cloudsecurityalliance.org/star

CSA STAR: Assisting Due Diligence

Level 1 STAR Self-AssessmentPublic Registry of Cloud Provider self assessments based on CSA standards

Level 2 STAR 3rd Party AuditsSTAR Certification: Integrates ISO/IEC 27001:2013 STAR Attestation: Based upon Type 2 SOC

Coming in Q4 2016: STARWatchAsk for provider’s STAR entry

If unavailable, ask provider to fill out CSA’s Cloud Controls Matrix or Consensus Assessments Initiative Questionnaire

www.cloudsecurityalliance.org/research/ccmwww.cloudsecurityalliance.org/research/cai

Research for 2016Guidance V4Global Enterprise Advisory BoardSoftware Defined PerimeterFinancial Services PlatformCCM/CAIQ/CTP/CloudAuditSecurity as a ServiceInternet of ThingsQuantum-Safe ComputingCASB enablement: OpenAPIOtherIt is all free!

https://cloudsecurityalliance.org/research

Emerging Trends We Are Evaluating

BlockchainContainers, micro servicesInternet of Things DevSecOps: DevOps applied to securityAnalyticsAutonomous computingArtificial IntelligenceQuantum-Safe Computing

A New Day forComputing

andTrust

Argentina has a strategic role

Developing a secure world, virtually, in software

ContactHelp us solve tomorrow’s

problems today

Emailinfo@cloudsecurityalliance.org

WWWwww.cloudsecurityalliance.org

Twitter@cloudsa

THANK YOU

Csa summit argentina-reavis

Technology

TRANSMITTER CSA-528-80-4 CSA-528-80-2 CSA-528 · 2017. 10. 25. · I Forward Than you very much for purchasing the transmitter, model CSA-528-80-4, CSA-528-80-2 and CSA-528. This

SEATTLE TILTH FARM WORKS CSA Examples. Sample CSA Boxes Sample CSA Boxes

The Reavis Newsletter...The Reavis Newsletter Volume 48, Issue 1, Winter 2014-2015 Northern Illinois University From the Chair Amy Levin Greetings from Reavis Hall! Calendar year 2014

HubHubUK pressrelease FINAL [4] - HB Reavis · HubHub, an HB Reavis company, offers flexible desks for those hopping between offices, fixed desks for permanent businesses and office

Cloud Security Alliance Research & Roadmap Jim Reavis Executive Director June 2011

The Int, egrated Learning Environment .,,. ,,.,, ,.., ,,.,, …teacherlink.ed.usu.edu/yetcres/catalogs/reavis/339.pdf · egrated Learning Environment .,,. ,.#. ,,.,, ,.., ,,.,, ,

Csa Summit 2017 - Csa Star for dummies

Climate-Smart Agriculture in Argentina - World Banksdwebx.worldbank.org/.../doc/agricultureProfiles/CSA-in-Argentina.pdf · Climate-Smart Agriculture in Argentina ... offers a valuable

January-February SASI Newsletter 2016 by Jewel Reavis

REAVIS, RACHAEL DIANNA, M.A. Predicting Early Peer ... · REAVIS, RACHAEL DIANNA, M.A. Predicting Early Peer Acceptance from Toddler Peer Behavior. (2007) Directed by Dr. Susan P

CSA 201 CSA Basics-Can CSA Pay?...CSA 201 CSA Basics-Can CSA Pay? 2019 Children’s Services Act Conference Resiliency: Achieving the Possible Presented by Carol Wilson OCS Program

Argentina Agricultural & Sightseeing Tour€¦ · Visit A A (Argentina o-op Association) presentation on Argentina Ag Industry in Argentina. Afternoon: ity Tour of Argentina - Free

Contractor Sourcing Application (CSA) Training Sourcing Application (CSA) Training 1 New New Supplier Supplier Presentation 2011Presentation 2011 Agenda CSA Overview CSA CSA m major

Reavis G.H. 'Animal School

Edison Fourth Grade 2014-2015 Jenny Vondracek Brian Reavis Carrie Davis

Achieving Security Assurance and Compliance in the Cloud Jim Reavis , Executive Director

Cloud Security Alliance Research & Roadmap Jim Reavis Executive Director August 2011

CITY COUNCIL JANUARY 7, 2019 7:00 P.M. Council Minutes/2019... · Minutes: Reavis asked that the minutes be amended to say recess again into executive session. Reavis made a motion

^Prese vtatio v ^Co upay - HB Reavis · PDF fileThis presentation (the ^Prese vtatio v _ has been prepared by the company HB Reavis Holding S.à r.l. ~ ^we _or the ^Co upay _ as a

CSA Argentina Chapter | Presentación Institucional