Continuously Monitoring Controls in a Cloud Environment

This session will focus on how companies can continuously monitor and assess their security posture by looking at drift from their control baselines in the cloud.  Questions Corey asked the speaker: 1) What is continuous monitoring generally and why is it important? 2) What are some of the benefits of implementing continuous monitoring in a cloud environment? 3) What are some of the different cloud security control sources that should be considered when determining what to monitor? 4) At a high level, how do you begin to implement continuous monitoring in one or more of the major cloud providers (i.e. Amazon, Microsoft, Google)? 5) What are some best practices when implementing continuous monitoring in the cloud? Moderator: @Corey Reitz - Distinguished Cyber Assurance Architect, Sandia National Laboratories Speaker: Sarah Luiz - Cyber Security Consultant Recorded on 04-26-2023