Name: How to Simplify Multi-Cloud Security & Compliance
Start: 2023-02-01T19:00:00Z
End: 2023-02-01T19:00:39.000Z
Location: BrightTALK
Rating: 4.3

Orca Security is the industry-leading Cloud Security Platform that identifies, prioritizes, and remediates security risks and compliance issues across your cloud estate spanning AWS, Azure, Google Cloud and Kubernetes.

As organizations scale and modernize their cloud environments, they face increasing pressure to protect complex workloads, identities, and data without slowing innovation. In this joint webinar, GigaOm Field CTO Chris Ray, author of the 2025 GigaOm Radar Report for CNAPP, joins Orca Security experts Tim Chase and Ashleigh Lee to discuss the capabilities that matter most for securing modern cloud environments—and what’s next for the industry in 2026.

The panel will explore key features that every cloud security platform should deliver, including configuration drift detection, visualization of asset relationships, and data security and privacy. The discussion will also look ahead to emerging areas like threat hunting and anomaly detection, where analytics and machine learning are driving more proactive defenses.

The Future of Cloud Security: 2026 Trends and Insights from GigaOm

As we head into the end of the year, it’s important to take stock of how the cloud security landscape has transformed. Hear observations from industry leaders from Amazon Web Services (AWS) and Orca Security as they examine important trends around:
- How AI is transforming cloud environments and enabling new possibilities
- The expanding role of non-human identities (NHIs) in scaling modern organizations
- How cloud teams are advancing beyond traditional approaches to strengthen resilience

AI, NHIs, and the New Era of Cloud Risk

Gartner predicts that 90% of organizations will adopt a hybrid cloud strategy by 2027. Securing workloads across public cloud, private cloud, and on-prem environments has never been more critical—or more complex. Traditional tools often don’t fully cover hybrid deployments, leaving substantial blind spots that put sensitive data and operations at risk. 

Join Orca Security’s Tim Chase, Principal Technical Evangelist, and Dror Zalman, Product Manager, for a focused discussion on the unique challenges of hybrid cloud security. Learn how runtime protection can close visibility gaps, stop threats in real time, and deliver unified security across your entire hybrid estate.

What you’ll learn: 
     • Trends driving hybrid cloud adoption
     • Top security risks in hybrid environments
     • How runtime protection delivers full-stack, full-environment coverage

Hybrid Cloud Security: A Deep Dive into Runtime Protection

Cloud security risks are accelerating—and evolving fast. In this webinar, hear from Orca Security’s Bar Kaduri, Head of Research, and Shir Sadon, Cloud Security Researcher, as they unpack the key findings from the Orca 2025 State of Cloud Security Report. Join us to hear their perspectives and gain deep insights into topics such as:
   • The rise of AI-related risk in cloud environments
   • The growing threat of non-human identities (NHIs)
   • The growth of traditional cloud risks

AI, NHIs, and the New Risk Frontier: Unpacking the 2025 State of Cloud Security

Over the last 25 years, we have lived through several iterations of answering the question, “What security issue is most important to resolve?” Even with all of the advancements in code scanning, cloud workload protection, and visualizing attack paths to prevent compromise, developers and security teams need a more defensible way to determine what gets fixed first. Reachability analysis aims to solve this problem.

Join this webinar to learn about:
The evolution of vulnerability management from hypothetical risk to likely to be exploited
The intersection of application security and cloud security
Reachability analysis and what’s next for protecting cloud native applications

The Defender's Paradox: Why Traditional Vulnerability Management is Failing Cloud-Native Organizations

As organizations embrace the flexibility and innovation that multi-cloud strategies offer, they also inherit a new layer of complexity—especially when it comes to security. 

Examine the emerging challenges cloud security teams face, how to build a strategy that works across platforms and providers, and how cloud-agnostic security tools can help.

Cloud Security LIVE 2025: Mastering Multi-Cloud

Cloud security tools can inevitably make teams work in silos, leaving gaps while striving for full protection. See how our panelists redefine the status quo for their teams to sustainably work in the ways that are easiest and right for them.

Cloud Security LIVE 2025: Cloud & AppSec Myth Busting

Whether your organization is cloud-native or currently migrating to the cloud, every resilient cloud program requires some basic tactics executing on a long term strategy. 

This session will cover practical tips on how to approach building a resilient cloud security program—from executive alignment, to cross-functional buy-in and technology purchases to support corporate goals.

Cloud Security LIVE 2025: Growing a Cloud Security Program

Cloud security is a marathon, not a sprint. To stay ahead of the attackers as the threat landscape evolves, the former World Chess Champion, Max Euwe, says it best, “Strategy requires thought, tactics require observation.” 

There is no shortage of moves you could take as a security leader to keep your cloud environment and applications protected. Join this keynote session with Paul Vixie, AWS Deputy CISO, and Gil Geron, Orca Security CEO and Co-founder as they discuss:
   • Major trends in the cloud
   • Current challenges for cloud security
   • Strategy for resilience against cloud threats

Cloud Security LIVE Keynote: 2025 Mid-Year Review

Every security organization has to find a balance between preventing security breaches by proactively addressing risk and detecting breaches when they happen.  Join Orca Security for a practical discussion of using the Orca Security Platform to find the balance between the two.

Risks, Threats, and Solutions: Addressing Cloud Security in an Assume Breach World

Retailers are racing to meet evolving customer expectations by using cloud services to drive innovation, streamline operations, enhance customer experiences, and stay ahead of the competition. As retailers move to the cloud, they also become more attractive targets for bad actors seeking to exploit vulnerabilities, making robust security measures essential to protect operations and customer data. Join Orca Security, Google Cloud, and ESG to gain a better understanding of how retail organizations can effectively secure their cloud applications to protect their business and customer data.

Key Takeaways:
- How retail organizations can effectively secure their cloud applications
- How to gain full visibility, mitigate risk and achieve compliance with a cloud-native security solution 
- How to leverage cloud services to support business growth

Speaker Bios:
- Toby is an Advisor in Google Cloud’s Office of the CISO. As a Security Advisor, Toby works with the largest and most innovative companies on the planet, helping to develop security strategies. Prior to Google, Toby worked at Microsoft where he spent five years bringing industry solutions to Azure cloud. He is guided by a simple maxim: Build systems like you won’t be there to support them; build relationships like you will.
- As Orca's Field CTO, Neil helps organizations identify and contain security risks in their cloud estates. His passion for getting ahead of security problems comes from over a decade of leading customer-facing security incident response teams at Microsoft and seeing what happens when attackers win. Neil also helped build the future of cloud-native security at Twistlock, StackRox, and Torq before joining Orca. Neil is also an avid NYC-based street photographer.
- ESG Security Practice Director Melinda Marks covers technologies that help organizations scale safely while adopting faster cloud-native development cycles.

Navigating Cloud Security Challenges in the Retail Industry with Orca Security, Google Cloud, and ESG

As organizations increase their AI investments, AI security is often overlooked, leading to risks like exposed access keys, overly permissive identities, and misconfigurations that can undermine initiatives. Join our expert panel, moderated by Neil Carpenter, for a focused discussion on AI security in cloud computing, featuring insights from Orca’s 2024 State of AI Security Report. 

The session will cover:

● OWASP’s role in AI security and the Machine Learning Security Top Ten project.
● Key findings from Orca’s report and actionable strategies for your security framework.
● An introduction to AI Goat, the first open-source hands-on environment for AI security training.

Top AI Risks of 2024 in Cloud Services: An Expert Deep Dive

As the healthcare industry moves more data and applications to the cloud, security teams will (naturally) worry about the implications for privacy, compliance, and security. Join AWS and Orca Security for an open discussion of how diligent security teams are forging better security outcomes in the cloud.  We'll discuss how to address the unique concerns of hospitals, providers, and medical technology companies with a focus on prioritizing and addressing prominent risks.

Learn more: 
https://orca.security/solutions/industries/industry-healthcare/
https://orca.security/partners/technology/amazon-web-services-aws/

Mitigating Risks in Healthcare Cloud Environments: Insights from Orca and AWS

In the ever-evolving landscape of cloud security, identifying and mitigating risks is crucial for maintaining the integrity of your cloud environment. We invite you to join industry veterans from Orca Security and Aqua Security, who collectively bring over 40 years of experience in cybersecurity, for an insightful and educational session designed to enhance your understanding of container security and incident response in the cloud.  

Scenario: 
You’ve experienced an actual attack and now need to find the root cause and remediate it. Without runtime controls, your forensic investigations and attack path analysis can feel like chasing ghosts. This webinar will provide you with a comprehensive framework to achieve swift remediation and maintain robust cloud security. 

Key Takeaways: 
● Understanding Attack Paths: Learn how to identify and analyze attack paths within your cloud environment. 
● Framework for Remediation: Discover a structured approach to quickly and effectively remediate security incidents 
● Real-World Demo: Witness a live demo showcasing instant response and investigation techniques in the cloud

Navigating Attack Paths in the Cloud: A Framework for Swift Remediation

AI is revolutionizing industries, and cloud security is no different. Generative AI can significantly accelerate, simplify and improve an organization’s security posture. But what about the security risks in AI models? In this session, we will explore how GenAI is reducing Enterprise IT workloads and enhancing cloud security, while also introducing new risks. Join AI experts at Orca Security to learn about the five most common AI model risks, including data leakage and tampering, and how to prevent them.

Learn more about Orca's GenAI capabilities: https://orca.security/platform/ai-cloud-security/
Learn more about Orca's AI Security (AI-SPM) capabilities: https://orca.security/platform/ai-security-posture-management/

Accelerate Cloud Security with AI and Reduce AI Risk

AI is revolutionizing industries, and cloud security is no different. Generative AI can significantly accelerate, simplify and improve an organization’s security posture. But what about the security risks in AI models? In this session, we will explore how GenAI is reducing Enterprise IT workloads and enhancing cloud security, while also introducing new risks. Join AI experts at Orca Security to learn about the five most common AI model risks, including data leakage and tampering, and how to prevent them.

Using cloud and cloud-migration to accelerate business growth and explore new ways to innovate and quickly implement new services emphasizes the need to adopt the mindset of security-by-design and zero trust. Without a solid foundation of cyberprotection, businesses open a gateway for cyberattacks and cybercriminals to cause severe and irreparable damage. 

The core and foundation of true cybersecurity is validated digital identities (eID): The prerequisite of all other cybersecurity measures. Validated digital identities must be the one and only authorized way to identify and gain access across all user groups, services, and devices. 

For more than 15 years, Denmark has provided public access to the eID-solution MitID. 3rd. generation is now available delivering one unified system giving both citizens, employees, public authorities, and businesses easy access to validated digital identities. Bjarke Alling has been closely involved in the development of the solution and will share insights into how it is used and how validated digital identities can be implemented. 

Takeaways: 
1.) How the Danish solution for validated digital identities works 
2.) What the Danish solution for validates identities gives access to 
3.) How to adopt validated digital identities as the foundation of a truly cybersecure cloud infrastructure 

About the speaker:
Bjarke Alling is co-founder and acting Group Managing Director of cybersecurity company Liga. He is a current member and prior co-chair of the National Danish Cyber Security Council, former chair of their IT-security committee, member of the board at The Danish ICT Industry Association (ITB), and member of the board of D-Mærket (D-Seal)

Building a Cybersecure Cloud Infrastructure with Validated Digital Identities

As the saying goes, “everyone talks about the weather, but no one does anything about it.”  A storm is continually brewing around how much to embrace the cloud and where to set limits.   
As enterprises are turning to the cloud for improved economics, scalability, performance and capacity, the natural shift between embracing cloud and the need for application and workload protection is increasing.  How do we safely and securely put the emphasis on application and workload protection in the cloud as we have done on premises?   
 
In this session we will talk about: 
·         how you can easily enforce microsegmentation to protect from lateral movement 
·         how learned behaviors are the barometer for creating least privilege access policies  
·         how you can build security borders / fences around your applications protecting your crown jewels

Mark Twain & Cloud Security

Traditional agent-based cloud security tools have blind spots. They either can’t see all of your cloud assets or can’t analyze them with proper risk context. Security teams are increasingly turning to agentless Cloud Native Application Protection Platforms (CNAPPs), which offer faster setup and deployment, less maintenance and lower provisioning costs, wider visibility, and greater scalability than traditional security tools.

Sagy Kratu, Director of Enablement and Evangelism and Jason Silberman, Senior Product Marketing Manager, will cover:
- The current security threat landscape and risks to look out for
- Capabilities and limitations of various cloud security approaches
- Tips for selecting and getting started with a cloud-native application protection platform

The Future Is Agentless: Cloud Security for Modern Environments

Have you ever worked in an environment where servers were sort of just sitting around under-utilized? What about in an environment where you requested resources and they weren’t available? On-prem, this was a big deal. In the cloud world, you don’t see that as much.

Instead, you see something just as bad -- if not worse. In the cloud, resources (compute, storage, etc.) are always either over- or under-provisioned. Organizations are either spending way too much money monthly in the cloud for resources that aren’t needed or “scaling up” strategies aren’t in place, which ends in production environments not performing the way engineers are expecting. How can you plan for resource and cost optimization in the cloud?

In this session, you will learn:
- How to optimize Kubernetes clusters from a resource perspective.
- How to optimize Kubernetes resources/objects.
- Cost optimization strategies.
- Planning how resources will be used to avoid over or under utilization.

Kubernetes Resource Optimization

Tune into this webinar from DevOps expert Ethan Jewett to learn about distributed cloud patterns for SAP environments, including techniques for secure authentication and identity propagation. This will focus on how to build applications and business logic to extend your SAP environment using cloud technologies, how to expose the data and business logic within your SAP system as services that can be leveraged in cloud environments, as well as how to achieve interoperability between SAP Business Technology Platform (BTP) and hyper-scaler services such as AWS, Azure, and GCP. We’ll cover each of these topics through reference architectures and potential applications.

Key Takeaways:
- Learn some of the basic of ERP and SAP environments, which are often insulated from the rest of the enterprise.
- Understand the challenges of integrating SAP systems and tools into a distributed cloud environment.
- Learn techniques for working with SAP-related groups in your organization to merge SAP (and other) applications into your enterprise cloud strategy.
- Find out about resources available to support this integration.

Cloud patterns for SAP environments

Technology has the power to shape our evolution, and distributed cloud is the technology that will usher us into a new age.
Join Paul Miller, Wind River CTO, as he shares how technologists can harness the power of the distributed cloud to succeed in 5G and intelligent edge cloud systems in order to advance our collective future. View the entire session above, or pick and choose the sections you’re most interested in below.

The Future of Distributed Cloud

Digital transformation has driven a rapid increase in the use of cloud, and as a result many organisations are re-architecting their core business software for a distributed application infrastructure. By exploiting modern, agile development concepts such as microservices and APIs, IT leaders are delivering more flexible and responsive application services. However, this distributed infrastructure puts an even greater focus on securing every element of the interconnected cloud and edge platforms. 

In this session, F5 Field CTO Bart Salaets and Computer Weekly editor in chief Bryan Glick will discuss the opportunities and challenges for IT leaders in deploying, securing, connecting, and monitoring modern distributed apps. They will cover:

• The business drivers leading organisations to adopt distributed cloud services
• The challenges this presents and how IT leaders are tackling them
• The key technologies involved and how they fit together
• Key distributed cloud use cases

Distributed Cloud Services: Key Considerations for IT Leaders

Modern applications are no longer single, monolithic entities but are broken down into multiple microservices communicating through APIs – often deployed in different locations and clouds. As a result, deploying, securing, interconnecting, and monitoring modern apps has become more complex than ever before.

In this webinar, Bart Salaets will explain how to efficiently address these challenges in a distributed cloud environment. 
 
He will cover:
• Securing distributed applications through services such as WAF, DDoS mitigation, bot defence, and API protection
• Interconnecting applications deployed across different environments through multi-cloud networking capabilities
• Deploying applications across cloud and edge environments through a managed Kubernetes platform

By watching this session, your personal details will be shared with F5 and treated in accordance with the F5 Privacy Notice (https://www.f5.com/company/policies/privacy-notice). You also are signing up to be contacted about F5 products and services but you can unsubscribe at any time.

Distributed Cloud Services: Less Pain, More Gain

Leveraging Distributed Cloud Environments

When given a resource that has unlimited scalability, software developers and other IT personnel can become like kids in a candy store. Nothing is off limits because there are no limits to what the cloud can provide. Unfortunately, the same IT personnel using these resources are not the ones paying the bills.  

In this session, instructor and architect Brian Kirsch will explore ways to control your cloud costs through cost optimization and resource discovery and allocation. In addition, he will review better policy and procedure tips to help streamline the initial requests, work to remove the need for going back and correcting cost issues as well as how to make sure you see a sustainable impact forward that does not affect the users.

Key takeaways: 
- Cost Optimization.
- Resource Discovery.
- Resource Allocation.
- Policy Request Tips.
- Procedure Tips.
- Reporting.

Controlling costs in a resource that has no limits...

Organizations are increasingly distributing their operations across multiple public clouds in order to reduce cost, increase resiliency, and optimize services. However, multi-cloud strategies significantly increase complexity for security and governance teams tasked with applying consistent controls and policies across all cloud environments. 

In this webinar, Deborah Galea discusses the challenges of applying consistent security controls across multiple cloud platforms, as well as practical steps that organizations can take to minimize the complexity and overhead of securing a multi-cloud environment.

In this session, you’ll learn
  • Why organizations choose a multi-cloud strategy
  • Security and compliance challenges in multi-cloud environments
  • Recommendations to simplify multi-cloud security

How to Simplify Multi-Cloud Security & Compliance

Cloud Security

Multi Cloud

IT Security

Cyber Risk Management

Cyber Security

Security

Security Incidents

Cloud Compliance

Cloud Risk

Cyber Defence

Welcome to the virtualization community on BrightTALK! Whether it affects servers, storage, networks, desktops or other parts of the data center, virtualization provides real benefits by reducing the resources needed for your
infrastructure and creating software-defined data center components. However, it can also complicate your infrastructure. Join this active community to learn best
practices for avoiding virtual machine sprawl and other common virtualization pitfalls as well as how you can make the most of your virtualization environment.

Virtualization

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

How to Simplify Multi-Cloud Security & Compliance

Presented by

About this talk

Orca Security