Leading an Enterprise to the Public Cloud
summary
Enterprise moves production of customer‑facing sites and NPI data in production onto AWS with a documented business case, NIST 853‑aligned controls, and a AWS VPC three‑tier network plus encrypted direct link to the datacenter. External security consultants produce a risk register, MFA gets added to VPN, a web‑application firewall is deployed, and two rounds of pen testing report no critical findings. A small automating team builds everything under a 12‑week launch deadline and it goes live.
AI-written summary · about
chapters (16)
- 0:00Intro
- 1:44What is The Cloud?
- 3:11What does Enterprise mean to you?
- 7:20A new-ish way of working
- 8:50Outside Security Consultation
- 10:07Formal Risk Assessment
- 10:26Risk Register
- 11:15Formation of the ISMG
- 12:05Penetration testing
- 15:00Success begets success
- 18:25Stakeholders
- 18:49First conversations with IT
- 22:38Direct Connect back to the Datacenter
- 24:363 Party Security Consultation - AGAIN
- 25:18The written Business Case
- 26:31Lessons learned
related talks
01h 03mContinuous Security in the Cloud
32mCreate a cloud-ready environment
01h 02mTransforming IT pros to DevOps gurus: Ssecure your new tech stacks
43mModern Enterprise Network Architecture in AWS Cloud
41mBuild cloud foundations for growth and resilience
26mCase Study of Success
17mAdvance securely: Safely migrating to
26mChallenges of Large Enterprises in Moving to the Public Cloud