EP210 Cloud Security Surprises: Real Stories, Real Lessons, Real "Oh No!" Moments

Guest: Or Brokman, Strategic Google Cloud Engineer, Security and Compliance, Google Cloud Topics: Can you tell us about one particular cloud consulting engagement that really sticks out in your memory? Maybe a time when you lifted the hood, so to speak, and were absolutely floored by what you found – good or bad! In your experience, what's that one thing – that common mistake – that just keeps popping up? That thing that makes you say 'Oh no, not this again!' 'Tools over process' mistake is one of the 'oldies.' What do you still think drives people to it, and how to fix it? If you could give just one piece of cloud security advice to every company out there, regardless of their size or industry, what would it be?  Resources: Video (YouTube) "Threat Modeling: Designing for Security" by Adam Shostack EP16 Modern Data Security Approaches: Is Cloud More Secure? EP142 Cloud Security Podcast Ask Me Anything #AMA 2023 "For a successful cloud transformation, change your culture first" (OOT vs TOO blog) https://www.linkedin.com/in/stephrwong/  New Paper: "Autonomic Security Operations — 10X Transformation of the Security Operations Center" (2021)