Loading…
CloudEXPO 2019 has ended
Wednesday, June 26 • 4:20pm - 4:55pm
Is Everything in the Cloud?

Sign up or log in to save this to your schedule and see who's attending!

Feedback form is now closed.
Is Everything in the Cloud?

Having to undergo an onsite assessment for a cloud environment sounds like an oxymoron, right? Many organizations tell their auditor that because they are a cloud-based organization, they do not want or need an onsite assessment. A new, dangerous trend that we’ve seen is auditors complying with that request. Audit firms advertise that they can effectively conduct an audit 100% remotely. This disregards physical controls that are in place to safeguard sensitive data and the frameworks that require testing of physical controls.

Not everything is in the cloud, and it’s irresponsible to claim that everything is in the cloud. Offices, employees, weather patterns, heating and cooling systems, power regulation, device management, physical security controls — these things don’t exist in the cloud. Physical security and onsite assessments must be a major component of cloud security and the shared responsibility model.

As more organizations migrate massive amounts of data to the cloud, it drives both cloud service providers and customers to consider how the cloud will change their privacy, security, and compliance efforts. Lack of security in the cloud can be detrimental to both providers and customers. In this session, Shannon Lane will educate the audience through lessons learned from recent breaches, his own experiences as an information security auditor, and best practices for cloud security.

Speakers
avatar for Mike Wise

Mike Wise

Information Security Specialist, KirkpatrickPrice
Mike Wise is an Information Security Specialist at KirkpatrickPrice with over 15 years of experience in the information security industry. He holds CISSP, QSA, CISA, and ITIL certifications and tends to focus on data centers and distributed computing. In his current role, he enjoys... Read More →


Wednesday June 26, 2019 4:20pm - 4:55pm
10 Mobility | Security Room 210