Name: Agentless CNAPP: A New Approach to Multi-Cloud Security
Start: 2022-09-13T18:00:00Z
End: 2022-09-13T18:00:47.000Z
Location: BrightTALK
Rating: 4

Orca Security is the industry-leading Cloud Security Platform that identifies, prioritizes, and remediates security risks and compliance issues across your cloud estate spanning AWS, Azure, Google Cloud and Kubernetes.

As organizations scale and modernize their cloud environments, they face increasing pressure to protect complex workloads, identities, and data without slowing innovation. In this joint webinar, GigaOm Field CTO Chris Ray, author of the 2025 GigaOm Radar Report for CNAPP, joins Orca Security experts Tim Chase and Ashleigh Lee to discuss the capabilities that matter most for securing modern cloud environments—and what’s next for the industry in 2026.

The panel will explore key features that every cloud security platform should deliver, including configuration drift detection, visualization of asset relationships, and data security and privacy. The discussion will also look ahead to emerging areas like threat hunting and anomaly detection, where analytics and machine learning are driving more proactive defenses.

The Future of Cloud Security: 2026 Trends and Insights from GigaOm

As we head into the end of the year, it’s important to take stock of how the cloud security landscape has transformed. Hear observations from industry leaders from Amazon Web Services (AWS) and Orca Security as they examine important trends around:
- How AI is transforming cloud environments and enabling new possibilities
- The expanding role of non-human identities (NHIs) in scaling modern organizations
- How cloud teams are advancing beyond traditional approaches to strengthen resilience

AI, NHIs, and the New Era of Cloud Risk

Gartner predicts that 90% of organizations will adopt a hybrid cloud strategy by 2027. Securing workloads across public cloud, private cloud, and on-prem environments has never been more critical—or more complex. Traditional tools often don’t fully cover hybrid deployments, leaving substantial blind spots that put sensitive data and operations at risk. 

Join Orca Security’s Tim Chase, Principal Technical Evangelist, and Dror Zalman, Product Manager, for a focused discussion on the unique challenges of hybrid cloud security. Learn how runtime protection can close visibility gaps, stop threats in real time, and deliver unified security across your entire hybrid estate.

What you’ll learn: 
     • Trends driving hybrid cloud adoption
     • Top security risks in hybrid environments
     • How runtime protection delivers full-stack, full-environment coverage

Hybrid Cloud Security: A Deep Dive into Runtime Protection

Cloud security risks are accelerating—and evolving fast. In this webinar, hear from Orca Security’s Bar Kaduri, Head of Research, and Shir Sadon, Cloud Security Researcher, as they unpack the key findings from the Orca 2025 State of Cloud Security Report. Join us to hear their perspectives and gain deep insights into topics such as:
   • The rise of AI-related risk in cloud environments
   • The growing threat of non-human identities (NHIs)
   • The growth of traditional cloud risks

AI, NHIs, and the New Risk Frontier: Unpacking the 2025 State of Cloud Security

Over the last 25 years, we have lived through several iterations of answering the question, “What security issue is most important to resolve?” Even with all of the advancements in code scanning, cloud workload protection, and visualizing attack paths to prevent compromise, developers and security teams need a more defensible way to determine what gets fixed first. Reachability analysis aims to solve this problem.

Join this webinar to learn about:
The evolution of vulnerability management from hypothetical risk to likely to be exploited
The intersection of application security and cloud security
Reachability analysis and what’s next for protecting cloud native applications

The Defender's Paradox: Why Traditional Vulnerability Management is Failing Cloud-Native Organizations

As organizations embrace the flexibility and innovation that multi-cloud strategies offer, they also inherit a new layer of complexity—especially when it comes to security. 

Examine the emerging challenges cloud security teams face, how to build a strategy that works across platforms and providers, and how cloud-agnostic security tools can help.

Cloud Security LIVE 2025: Mastering Multi-Cloud

Cloud security tools can inevitably make teams work in silos, leaving gaps while striving for full protection. See how our panelists redefine the status quo for their teams to sustainably work in the ways that are easiest and right for them.

Cloud Security LIVE 2025: Cloud & AppSec Myth Busting

Whether your organization is cloud-native or currently migrating to the cloud, every resilient cloud program requires some basic tactics executing on a long term strategy. 

This session will cover practical tips on how to approach building a resilient cloud security program—from executive alignment, to cross-functional buy-in and technology purchases to support corporate goals.

Cloud Security LIVE 2025: Growing a Cloud Security Program

Cloud security is a marathon, not a sprint. To stay ahead of the attackers as the threat landscape evolves, the former World Chess Champion, Max Euwe, says it best, “Strategy requires thought, tactics require observation.” 

There is no shortage of moves you could take as a security leader to keep your cloud environment and applications protected. Join this keynote session with Paul Vixie, AWS Deputy CISO, and Gil Geron, Orca Security CEO and Co-founder as they discuss:
   • Major trends in the cloud
   • Current challenges for cloud security
   • Strategy for resilience against cloud threats

Cloud Security LIVE Keynote: 2025 Mid-Year Review

Every security organization has to find a balance between preventing security breaches by proactively addressing risk and detecting breaches when they happen.  Join Orca Security for a practical discussion of using the Orca Security Platform to find the balance between the two.

Risks, Threats, and Solutions: Addressing Cloud Security in an Assume Breach World

Retailers are racing to meet evolving customer expectations by using cloud services to drive innovation, streamline operations, enhance customer experiences, and stay ahead of the competition. As retailers move to the cloud, they also become more attractive targets for bad actors seeking to exploit vulnerabilities, making robust security measures essential to protect operations and customer data. Join Orca Security, Google Cloud, and ESG to gain a better understanding of how retail organizations can effectively secure their cloud applications to protect their business and customer data.

Key Takeaways:
- How retail organizations can effectively secure their cloud applications
- How to gain full visibility, mitigate risk and achieve compliance with a cloud-native security solution 
- How to leverage cloud services to support business growth

Speaker Bios:
- Toby is an Advisor in Google Cloud’s Office of the CISO. As a Security Advisor, Toby works with the largest and most innovative companies on the planet, helping to develop security strategies. Prior to Google, Toby worked at Microsoft where he spent five years bringing industry solutions to Azure cloud. He is guided by a simple maxim: Build systems like you won’t be there to support them; build relationships like you will.
- As Orca's Field CTO, Neil helps organizations identify and contain security risks in their cloud estates. His passion for getting ahead of security problems comes from over a decade of leading customer-facing security incident response teams at Microsoft and seeing what happens when attackers win. Neil also helped build the future of cloud-native security at Twistlock, StackRox, and Torq before joining Orca. Neil is also an avid NYC-based street photographer.
- ESG Security Practice Director Melinda Marks covers technologies that help organizations scale safely while adopting faster cloud-native development cycles.

Navigating Cloud Security Challenges in the Retail Industry with Orca Security, Google Cloud, and ESG

As organizations increase their AI investments, AI security is often overlooked, leading to risks like exposed access keys, overly permissive identities, and misconfigurations that can undermine initiatives. Join our expert panel, moderated by Neil Carpenter, for a focused discussion on AI security in cloud computing, featuring insights from Orca’s 2024 State of AI Security Report. 

The session will cover:

● OWASP’s role in AI security and the Machine Learning Security Top Ten project.
● Key findings from Orca’s report and actionable strategies for your security framework.
● An introduction to AI Goat, the first open-source hands-on environment for AI security training.

Top AI Risks of 2024 in Cloud Services: An Expert Deep Dive

As the healthcare industry moves more data and applications to the cloud, security teams will (naturally) worry about the implications for privacy, compliance, and security. Join AWS and Orca Security for an open discussion of how diligent security teams are forging better security outcomes in the cloud.  We'll discuss how to address the unique concerns of hospitals, providers, and medical technology companies with a focus on prioritizing and addressing prominent risks.

Learn more: 
https://orca.security/solutions/industries/industry-healthcare/
https://orca.security/partners/technology/amazon-web-services-aws/

Mitigating Risks in Healthcare Cloud Environments: Insights from Orca and AWS

In the ever-evolving landscape of cloud security, identifying and mitigating risks is crucial for maintaining the integrity of your cloud environment. We invite you to join industry veterans from Orca Security and Aqua Security, who collectively bring over 40 years of experience in cybersecurity, for an insightful and educational session designed to enhance your understanding of container security and incident response in the cloud.  

Scenario: 
You’ve experienced an actual attack and now need to find the root cause and remediate it. Without runtime controls, your forensic investigations and attack path analysis can feel like chasing ghosts. This webinar will provide you with a comprehensive framework to achieve swift remediation and maintain robust cloud security. 

Key Takeaways: 
● Understanding Attack Paths: Learn how to identify and analyze attack paths within your cloud environment. 
● Framework for Remediation: Discover a structured approach to quickly and effectively remediate security incidents 
● Real-World Demo: Witness a live demo showcasing instant response and investigation techniques in the cloud

Navigating Attack Paths in the Cloud: A Framework for Swift Remediation

AI is revolutionizing industries, and cloud security is no different. Generative AI can significantly accelerate, simplify and improve an organization’s security posture. But what about the security risks in AI models? In this session, we will explore how GenAI is reducing Enterprise IT workloads and enhancing cloud security, while also introducing new risks. Join AI experts at Orca Security to learn about the five most common AI model risks, including data leakage and tampering, and how to prevent them.

Learn more about Orca's GenAI capabilities: https://orca.security/platform/ai-cloud-security/
Learn more about Orca's AI Security (AI-SPM) capabilities: https://orca.security/platform/ai-security-posture-management/

Accelerate Cloud Security with AI and Reduce AI Risk

AI is revolutionizing industries, and cloud security is no different. Generative AI can significantly accelerate, simplify and improve an organization’s security posture. But what about the security risks in AI models? In this session, we will explore how GenAI is reducing Enterprise IT workloads and enhancing cloud security, while also introducing new risks. Join AI experts at Orca Security to learn about the five most common AI model risks, including data leakage and tampering, and how to prevent them.

Tune into this webinar to learn winning strategies to understand the complex, multi-cloud environment. The University of Washington's Deveeshree Nayak will also introduce approaches to address the common threats present in the multi-cloud as well as the roles the multi-cloud serves in different industries. 

Viewers will come away from this presentation with a better understanding of:
- The overall view of a multi-cloud environment;
- The benefits of the multi-cloud;
- Approaches to address the threats associated with the multi-cloud across various industries.

The Benefits and Threats of the Multi-Cloud

Bocada’s recently published Backup Monitoring Trends Report highlighted the challenges impacting backup and data protection professionals today, and the key issues they anticipate managing in the future. The report’s themes illuminate the core hurdles backup operators transitioning to cloud or multi-cloud environments must plan for to not just meet, but exceed, data protection guidelines.  

In this session, we’ll review the report’s findings, and what they mean for building resilient backup environments for years to come. You will learn:

- The top issues impacting backup professionals as they migrate to cloud environments 
- Best practices for mitigating day-to-day cloud backup operations challenges 
- Trends impacting backup operations in 3-5 years 
- How to build backup protections to mitigate cloud security threats 

Speakers: 

James McDonnell has over ten years' experience working with complex backup environments. As Bocada’s Sr. Systems Engineer, James supports enterprise-scale organizations across the globe to implement automated backup operations and help them meet stringent regulatory guidelines.  

Laura Troyani is the Principal of PlanBeyond, a market research firm. Laura has spent years leading original research on behalf of IT clients and was the lead on building and fielding the survey for Bocada’s Backup Monitoring Trends Report.

Building Best-In-Class Multi-Cloud Backup Operations

According to Statista, a global market and consumer data provider, between 2021 and 2023, the percentage of organizations adopting a multi-cloud strategy will grow for midsize companies from 76% to 84%, and for large enterprises from 90% to 94%.

Cloud providers offer many security monitoring and threat detection options, but what if you subscribe to more than one? Adopting security monitoring tools from each provider can increase complexity and bring significant overhead to security operations teams. 

For years, security information and Event Management (SIEM) solutions have been collecting and consolidating data from multiple sources for centralized threat detection. Still, multi-cloud brings a new scenario with different data sources, higher volumes, and unknown threats. How does SIEM have to evolve to adapt to this new reality?

Join Augusto Barros, VP of Solutions and Cybersecurity evangelist, and Brian Robertson, Senior Product Marketing Manager at Securonix, to learn about:

· Why is it hard to perform security monitoring in a multi-cloud scenario?
· What are the limitations of traditional SIEMs to support multi-cloud needs?
· What do you need to look for in a new approach and architecture that enables the SIEM to be the right solution to detect threats in a multi-cloud world?
 
Speakers:
Augusto Barros was most recently the Research VP in the Gartner for Technical Professionals (GTP) Security and Risk Management group. He has over 20 years of experience in the IT security industry as an analyst and a security architect and officer for large enterprises.

Brian Robertson has over 20 years of experience helping organizations solve critical application delivery, network, cloud, and security challenges working with industry leaders who not only are looking at the challenges of today but are looking at the horizon for the challenges of tomorrow.

SIEM: Threat Detection and Response for your Multi-cloud World

With so much noise about threats and the tool soup of solutions being marketed, where are security teams supposed to focus?

There are a bevy of solutions that enable visibility into endpoint and network centric metrics, but what about visibility into your applications, their connections, user interactions, and the network?

Applications are often overlooked. In reality, this accidental oversight makes your organization vulnerable. Visibility and understanding of your applications should be at the top of the list for security teams. So how do you get there?

Join TrueFort to understand how an application-centric visibility reduces your attack surface through: 

·    Live application behavioral mapping 
·    Proactive attack prevention 
·    Deep forensic timeline & playback 
·    Real-time detection and automated response

How Can You Protect What You Can't See?

Emerging cloud leaders are seeking industry collaboration, best practices, and insights on how to tame the thorny stems of multi-cloud security. Contending with technology, talent and governance challenges,  join NetApp's Jyoti Wadhwa, as she shares how leaders can deploy a proven approach to realize the promises of greater efficiency, lower cost, and real-time security of the cloud. 

For fellow security practitioners and leaders, she will address both strategic and operational aspects of multi-cloud security ranging on mission critical topics of migrating an organization’s on-premise data center capabilities to developing standardized architectures and leading enterprise-wide adoption. In her discussion, Jyoti will cover 5 leadership strategies to achieve multi-cloud security:
 
1. Disentangle the Tech.
2. Unify the Cloud Team.
3. Build your Experts.
4. Update Security Governance.
5. Effectively Communicate.

Top 5 Leadership Strategies for Multi-Cloud Security

Based on hands-on experiences from a large number of cloud application development projects, Karl has compiled a list of top 5 key security pitfalls that are common across all application types and team sizes. In this session, he will share what these security pitfalls are, why they matter, and how to mitigate them.

About the speaker:
Karl Ots is a cloud and cybersecurity expert, as well as international speaker and trainer, with a broad range of deep Azure expertise. He believes that secure cloud technologies are the key to successful digital transformation. He applies his passion as Head of Cloud Security at EPAM Systems. Karl has been working with Microsoft Azure since 2011 in a variety of forums ranging from large projects to speaking at largest tech conferences, such as Microsoft Ignite. Karl is a Microsoft Certified Trainer (MCT) and a Certified Information Systems Security Professional (CISSP). He is the author of Azure Security Handbook.

Top Public Cloud Security Fails and How to Avoid Them

In this session, the University of Washington's Deveeshree Nayak will cover why cloud security education is so vital. Additionally, this need for awareness spans all facets of educational and working life from K12 schools, universities and businesses across all different industries. 

Viewers will walk away from this presentation with a greater understanding of:
1. What is cloud security?
2. Why it is so important to understand how cloud security works?
3. How implementation and use of the cloud varies in different industries?
4. Why leaders should take the necessary time and energy to educate everyone on cloud and cloud security whether they are in schools, universities or companies.

The Importance of Cloud Security Education and Awareness

In this session, the University of Washington's Deveeshree Nayak will cover the best practices for conducting application security in the cloud as well as the common vulnerabilities cloud-based applications face.

Attendees will come away with knowledge of:
1. What is application security in the cloud?
2. The best practices for application security in the cloud?
3. How to identify the potential vulnerabilities facing application in the cloud and preventative measure to take.

Cloud Application Security: Best Practices and Vulnerabilities

Since the birth of the Internet, it has been missing a layer of identity protocols that define identifiers for people, organizations and things separate from an application, making identity and access management more and more complicated as enterprises are moving to a multi-cloud strategy and face advancing threats from attackers. 

In the presentation, Kaliya Young, widely known as the Identity Woman, is going to introduce some new and emerging Internet identity standards and technologies, e.g. W3C Verifiable Credentials, W3C Decentralized Identifiers, which can help enterprises improve application security significantly at multiple fronts:
• Identity and access management across multiple cloud environments; 
• Workforce and customer identity and access management; 
• Information/data security management.

Implementing Emerging Identity Standards for Better Application Security

One of the most transformative recent shifts within application development in a cloud context is the rise of IaC -- infrastructure as code technologies like Terraform and CloudFormation. As organizations make more use of IaC, it's important for security organizations to pay attention. Why? Because IaC changes the risk equation -- it introduces some new potential risks, and can help close some existing ones.  

This discussion aims to answer these questions:
• Why/how IaC requires thinking about security of assets a new way.
• Artifacts produced by IaC and how they can help us.
• Security “gotchas” and things to watch out for when changing to IaC.
• How you can tailor your security program in light of IaC.

Ed Moyle is currently Director of Software and Systems Security for Drake Software.  In his 20 years in information security, Ed has held numerous positions including: Director of Thought Leadership and Research for ISACA, Application Security Principal for Adaptive Biotechnologies, Senior Security Strategist with Savvis, Senior Manager with CTG, and Vice President and Information Security Officer for Merrill Lynch Investment Managers.  Ed is co-author of Cryptographic Libraries for Developers and Practical Cybersecurity Architecture, and a frequent contributor to the Information Security industry as author, public speaker, and analyst.

Better Security with IaC

Advanced Techniques and Common Pitfalls in Scaling Cloud Security

The specific challenges of securing an expansive multi-cloud or hybrid environment go far beyond the cloud-provider baselines and compliance best practices. Decision makers are moving beyond the legacy tool portfolio standards to address the need for a new approach to people, process, and technology strategy.

In this fireside chat, we’ll outline and then dive into the most salient and unique challenges for mature cloud sec teams, including a lack of visibility, the ephemeral nature of the cloud, and inflexible processes. Then we’ll discuss a few new approaches to address these challenges in your strategy immediately. Key elements of securing cloud environments (IaaS/PaaS and SaaS) across the major public cloud providers (AWS, GCP, Azure) and share critical insights on how modern defenders should be approaching the most salient challenges of cloud security, including:

 - Why cloud threats look different and how to model them
 - Addressing and eliminating the dreaded data silo
 - Operationalizing a “visibility first” strategy for security decision making

The ephemeral nature of misconfigurations and vulnerabilities in the cloud and how to manage them
Join Uptycs’ Director of Cloud Security and former AWS Head of ATO, Andre Rall with Director of Product Management and former Former RSA Product Executive and Security Expert Sudarsan Kannan for an in-depth chat. This will be a useful session for anyone building a cloud-native security program to support and enhance their organization’s growth and innovation.

Oops! Your Developer’s Laptop Is Connected to Your Cloud… What Now?

Web apps and APIs present a major risk for organizations of all sizes, according to the Verizon DBIR about two of every five breaches originate in a web app – and the problem is only growing. In most organizations, innovation pressures still outweigh security priorities. 
So what can AppSec professionals do in order to reduce their web attack surface? In this presentation, Invicti Security Chief Product Officer Sonali Shah dives into the top five AppSec risks that every organization should be aware of and provides best practices for securing cloud-based web apps and APIs.

Application Security Trends and Best Practices

95 percent of data breaches are cause by human errors, and with an average cost of a data breach globally being $3.92 million, it is not only a privacy concern but also very costly of an organization. More 50 percent of companies say that their IT departments are not sophisticated enough to handled advanced cyberattacks, but it doesn't have to be hard to probably secure your data.
In this talk we will show how Application-Layer encryption (ALE) can be applied easily to your data with a minimal amount of code changes, and ensure even authorized applications only have minimal access to the data using cryptographic principles and a role-based access control model. This means, that if you data is leaked, the attacked won't have access to your data.
All this can be implemented without fully sacrificing the advantages of a database, such as filtering.

Bio of the presenter: 
Kim has been working with computer science for 12 years, and has worked in the cyber security, telecommunications and finance industry. Today he is a cloud tech lead in CYBERCRYPT.

How to protect your data using Application Layer Encryption

As more organizations adopt multi-cloud strategies, security managers are increasingly challenged by how to protect web applications spread across multiple environments, while preserving consistency, quality of security and centralized visibility. 

The traditional approach to web application security no longer works in a multi-cloud world, and a new approach is needed.

Join us to discuss the new challenges of multi-cloud security and how to overcome them.

In this discussion you will learn:
• What are the security challenges of the multi-cloud
• Why traditional approaches and tools no longer work
• What are the requirements for multi-cloud security solutions
• How Radware helps organizations protect their web application in a multi-cloud world

Protecting Web Applications in a Multi-Cloud World

There was a time when applications were hosted on a traditional computing model. All hardware and software resided in-house. Companies maintained physical servers on-premises in a secure climate-controlled room with a secure level of access. Only Network Engineers were allowed access to application security as it mainly revolved around the network (port, FW) and OS level protection with security-level access to server rooms. But times have changed. Companies now have more to gain with a more layered approach to application security. 

Tune into this presentation to hear TD Bank's Application Release Engineer Pankul Chitrav discuss the challenges faced by businesses still using the traditional model and how we can overcome these challenges by implementing a layered security model.

Define Application Security Accurately To Generate Business Success

Within many enterprises that are expanding their network and accelerating adoption of the cloud, building a Cloud Security Governance model can be tricky. Finding and establishing a path of support and collaboration between development and application teams, risk and compliance groups, and Cloud Security practitioners should be a key objective to an effective Cloud Governance program.

In this live talk, you’ll learn how to drive operational processes and procedures by adopting a governance framework to take control of your cloud environment and its data.

A few topics we’ll cover:

• Factors to consider when designing a governance model for security in the cloud
• Strategy and methods for aligning people, processes and workflows among disparate teams to
        achieve a unified governance framework
• The impact of cloud governance across multi-cloud environments

The Art of Cloud Governance: Essential for Modern Businesses

Tune into this session to hear cloud expert Dwayne Natwick provide guidance for configuring and managing hybrid and multi-cloud resources within cloud native tools for complete security posture management of your infrastructure. After configuring resources for security posture management, you will learn how to configure vulnerability scans on these resources for next level security posture management.

Key takeaways attendees will learn include:
--The evolving types of infrastructure with multiple cloud providers and on-premises architectures.
--Options that tools provide for multi-cloud and hybrid infrastructure security posture management.
--How to manage security posture through cloud-native tools for the full infrastructure.

About the speaker:
Dwayne is a Global Principal Cloud Security Technical Lead/CTO for Atos across Microsoft, AWS, and GCP.  He is the thought leader determining trends, developing, advocating, and building business plans for the overall cybersecurity services for this global systems integrator. Dwayne also leads the cloud education portfolio for Microsoft and AWS. In addition to creating curriculum, training, and blog writing, he is a Microsoft MVP and a Microsoft Certified Trainer Regional Lead. Dwayne has spoken at conferences and user groups globally on cloud security, identity security, and data/AI trends. Dwayne has authored books and is a Security Professional Community Manager for Packt Publishing.

Security Posture Management for Multi-Cloud and Hybrid Infrastructures

The cloud is the optimal environment for most workloads, with many organizations using multiple cloud providers to reduce risk, maximize agility, and control costs. With these benefits, comes security risks. Join this keynote session to explore the latest threats to multicloud environments and effective strategies to improve your security posture.

During this session, you will learn: 
- How to secure endpoints, dev/test environments, tools/monitoring, and more
- Strategies for de-coupling security from compute
- Best practices to minimize sprawl and improve security posture

Multicloud Cybersecurity Trend:Supercharged Strategies for Supercharged Threats

Spreading operations across more than one cloud enables organizations to choose from a variety of cloud services to cut costs, improve operations and improve scalability. However, operating complex environments across multiple platforms requires a comprehensive strategy to handle connectivity, applications, data and security.

In this panel, experts will discuss how organizations can evaluate risks in their own and their cloud service provider environments, as well as technologies and tools that can assist in achieving a comprehensive strategy.

Join us to learn about:
--Understanding cloud scope across the organization
--Cloud governance frameworks
--Pros and cons of centralizing security access and monitoring controls
--Multi-cloud management and network security analytics platforms
--Cloud security posture management (CSPM) tools that can identify misconfigurations and risks
--Tools for cloud compliance monitoring

Moderated by: Evgeniy Kharam, Cybersecurity Architect and Advisor, Podcaster 
Steve Cobb, Chief Information Security Officer, One Source
Eyal Arazi, Senior Product Marketing Manager, Radware

Build a Multi-cloud Strategy that Supports Governance and Compliance

As cloud adoption across industry verticals increases, hybrid, public, and private cloud infrastructure deployment models grow in use. In order to improve architecture and service resiliency, and to avoid vendor lock-in, one of the common cloud architecture deployment models also includes multi-cloud platforms. Whereas multi-cloud deployment does have its benefits, relying on multiple vendors and clouds increases the attack surface and overall associated risks. Additionally, multiple platforms increases complexity making security even more challenging to design, deploy and monitor. 

In this webinar, we aim to highlight following key takeaways for the audience: 
• Managing multi-cloud security challenges; 
• Important security controls; 
• Strategy to manage compliance requirements;
• Role of automation; 
• Logging, auditing and monitoring.

Security Challenges and Mitigation Techniques for the Multi-Cloud

Accelerating your cloud transformation whilst reducing risk:
Shared responsibility, with less operational overhead. Find out how to set, secure and forget your cloud environment from core workloads to cloud-native development pipelines. Security teams and development teams have always been running in opposite directions, as quickly as possible. Security professionals have always felt like the bearer of bad news, slowing down their colleagues, and being a source of frustration. Boards overlay multi-cloud complexity through acquisition and merger. A complete 3rd party cloud security solution bridges the gap and allows cohesion and when done well, is almost completely invisible.

Invisible Cloud Security: Accelerating your cloud transformation

Organizations are adopting multi-cloud strategies to leverage capabilities of different cloud security providers (CSPs) and to provide flexibility to software development teams. But this brings up challenges for security teams who are responsible for managing security risk and meeting compliance regulations for workloads and applications running in different environments. In this session, ESG Senior Analyst Melinda Marks explores how to supercharge your security to gain the visibility and control you need to scale security programs for multi-cloud environments.

Supercharge Your Security for Multi-Cloud

Superpowered Security for the Multi-Cloud in 2022

Service downtime is more expensive than ever and ensuring consistent access to mission-critical applications and good end-user experience is essential for customer loyalty and employee productivity. Protecting your revenue-generating services and data from security threats and attacks that may stall the business is not a choice.  A lot of newer types of attacks emerge from within the network. Businesses must implement a strategy to ensure network-centric security and observability for threat detection and mitigation. 

Join Andy Idsinga, Sr. Strategic Cloud Architect at cPacket, in this informative talk to learn how to de-risk your IT infrastructure and operations.

Learn more about:
•  Your options to provision a network-centric security and observability practice –i.e., network detection and response (NDR) solution across all three major clouds (Azure, AWS, GCP)
•  What to expect in your deployment journey and gaining real-time network visibility for vs forensic data for incident response 
•  The key questions and considerations for you and your IT teams in terms of technology and objectives

Rethinking Network-Centric Observability for Cloud Security

Using multiple cloud providers allows organizations to reduce cost, increase resiliency and optimize services. However, multi-cloud strategies significantly increase complexity for security teams tasked with applying consistent controls and policies across all cloud environments.  

As cloud usage increases and becomes more ephemeral, agent-based security across multiple clouds becomes unmanageable. In addition, increased security tool sprawl, with often multiple cloud provider tools for each platform, as well as separate point solutions for specific cloud security areas, further increases complexity. This leads to hundreds of (often duplicate) alerts every day, causing security teams to become desensitized and ultimately, miss critical alerts.  

In this webinar, Deborah Galea discusses how an agentless Cloud-Native Application Protection Platform (CNAPP) can significantly alleviate many security challenges in multi-cloud environments. 

In this session you will learn: 

- What are the security challenges in multi-cloud environments? 
- What is a CNAPP? 
- How does a CNAPP reduce cloud security tool sprawl? 
- How do you get full multi-cloud visibility with agentless cloud security? 
- How does an agentless CNAPP increase an organization’s agility? 
- How can a CNAPP prevent application security issues in pre-production?

Agentless CNAPP: A New Approach to Multi-Cloud Security

Multi Cloud

Cloud Security

Cyber Security

Digital Transformation

Risk Management

Security Awareness

Cloud

Cloud Applications

Cloud Architecture

Data Protection

Welcome to the virtualization community on BrightTALK! Whether it affects servers, storage, networks, desktops or other parts of the data center, virtualization provides real benefits by reducing the resources needed for your
infrastructure and creating software-defined data center components. However, it can also complicate your infrastructure. Join this active community to learn best
practices for avoiding virtual machine sprawl and other common virtualization pitfalls as well as how you can make the most of your virtualization environment.

Virtualization

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Agentless CNAPP: A New Approach to Multi-Cloud Security

Presented by

About this talk

Orca Security