“These Are the 100,000 Vulnerabilities We Found… but Here Are the Ten that Really Do Matter”

Silo Busting 61: A Clear View of Cloud Security with Yinon Costica, Sam Rehman, and Aviv Srour

The cloud creates “cloud cowboys,” says Yinon Costica, VP of Product and Co-Founder of Wiz.

This creates, as you might imagine, security issues.

“Cloud allows people to really own their stuff end-to-end. They can basically create whatever they want,” says Costica. But he says that security professionals need to ensure that the cowboys can “govern their environments in a way that is secured while they continue to build.”

These issues set the theme for this #CyberesecurityByDesign conversation between Costica, Sam Rehman, EPAM’s Chief Information Security Officer and SVP, and Aviv Srour, our Head of Cyber Innovation.

Rehman notes that the frequency of change in cloud is “great for software engineering,” but adds: “It also makes it very, very difficult for you to actually find your baseline, your footing,” regarding security.

One of the most useful things we learn on this episode is how cloud might help spread the responsibility for security. In the past, security was solely the problem of the security team but with cloud and its self-serve nature, Costica says: “Security now should be democratized to those who are actually managing the environments, running the resources, have the right context.”

As a group, the guys talk about the differences between on-prem and cloud security, the role of visibility plays in cloud, the pragmatism cloud brings to security, and more.

Understanding the manifold nature of cloud is critical, and it will require a lot more education than many organizations realize. Says Rehman: “If you don't have a good understanding of what your cloud looks like, which is the majority of people out there, then you still have a huge problem.”

Be part of the solution: Listen.

Host: Kenji Ross
Engineer: Kyp Pilalas
Producer: Ken Gordon