Cloud security
Everything I've written on cloud security, with the research pieces first. Each one ends with something you can do on Monday.
Dealing with one of these problems yourself? I work with organizations that need answers, not another slide deck. Let's talk.
What's in a five-angle short
Most subjects here are one page with five short sections, always in this order. Each has its own colour inside the article so you can jump to the one you need.
- 1Where I'd start: the first move I'd make, and the question I'd ask before spending anything.
- 2Where plans fail: where plans on this subject usually break, and the assumption I'd test first.
- 3Beyond the jargon: what the subject actually means once the vendor language is stripped out.
- 4What good looks like: the result that would tell you it worked, and the number I'd watch.
- 5The call leaders can't dodge: the decision leadership has to own, and what it needs on the table to make it.
-
Do Private Endpoints Prevent Cloud Data Exfiltration?
Assess private endpoints against destination ownership, service permissions and managed exports, then test the cloud data paths an egress firewall misses.
-
Who Is Responsible for Each Action During a Cloud Security Incident?
Map cloud incident actions to customer, provider and MSP authority. Test containment, evidence handoffs and emergency access before a real compromise.
-
Cloud IAM
I would not begin cloud IAM by buying another platform or launching a large programme. I would find the boundary, the accountable owner, and one scenario wor...
-
Cloud network segmentation
I would not begin cloud network segmentation by buying another platform or launching a large programme. I would find the boundary, the accountable owner, and...
-
Cloud recovery
I would not begin cloud recovery by buying another platform or launching a large programme. I would find the boundary, the accountable owner, and one scenari...
-
Cloud security economics
I would not begin cloud security economics by buying another platform or launching a large programme. I would find the boundary, the accountable owner, and o...
-
Container security
I would not begin container security by buying another platform or launching a large programme. I would find the boundary, the accountable owner, and one sce...
-
Control-plane logging
I would not begin control-plane logging by buying another platform or launching a large programme. I would find the boundary, the accountable owner, and one ...
-
Infrastructure as code
I would not begin infrastructure as code by buying another platform or launching a large programme. I would find the boundary, the accountable owner, and one...
-
Kubernetes RBAC
I would not begin Kubernetes RBAC by buying another platform or launching a large programme. I would find the boundary, the accountable owner, and one scenar...
-
Multi-cloud governance
I would not begin multi-cloud governance by buying another platform or launching a large programme. I would find the boundary, the accountable owner, and one...
-
Secrets management
I would not begin secrets management by buying another platform or launching a large programme. I would find the boundary, the accountable owner, and one sce...
-
Your cloud bill is a security signal
The finance team sees it first and doesn't know what it means. A compute line that doubled over a weekend. A region you've never used. Egress to somewhere un...
Nothing matches. Try another word, or ask me directly.