Cloud Security Handbook for Architects

A comprehensive guide to secure your future on Cloud

KEY FEATURES

? Learn traditional security concepts in the cloud and compare data asset management with on-premises.

? Understand data asset management in the cloud and on-premises.

? Learn about adopting a DevSecOps strategy for scalability and flexibility of cloud infrastructure.

? Choose the right security solutions and design and implement native cloud controls.

DESCRIPTION

Cloud platforms face unique security issues and opportunities because of their evolving designs and API-driven automation. We will learn cloud-specific strategies for securing platforms such as AWS, Microsoft Azure, Google Cloud Platform, Oracle Cloud Infrastructure, and others. The book will help you implement data asset management, identity and access management, network security, vulnerability management, incident response, and compliance in your cloud environment.

This book helps cybersecurity teams strengthen their security posture by mitigating cyber risk when "targets" shift to the cloud. The book will assist you in identifying security issues and show you how to achieve best-in-class cloud security. It also includes new cybersecurity best practices for daily, weekly, and monthly processes that you can combine with your other daily IT and security operations to meet NIST criteria.

This book teaches how to leverage cloud computing by addressing the shared responsibility paradigm required to meet PCI-DSS, ISO 27001/2, and other standards. It will help you choose the right cloud security stack for your ecosystem. Moving forward, we will discuss the architecture and framework, building blocks of native cloud security controls, adoption of required security compliance, and the right culture to adopt this new paradigm shift in the ecosystem.

WHAT WILL YOU LEARN

? Understand the critical role of Identity and Access Management (IAM) in cloud environments.

? Address different types of security vulnerabilities in the cloud.

? Develop and apply effective incident response strategies for detecting, responding to, and recovering from security incidents.

? Establish a robust and secure security system by selecting appropriate security solutions for your cloud ecosystem.

? Ensure compliance with relevant regulations and requirements throughout your cloud journey.

? Explore container technologies and microservices design in the context of cloud security.

WHO IS THIS BOOK FOR?

The primary audience for this book will be the people who are directly or indirectly responsible for the cybersecurity and cloud security of the organization. This includes consultants, advisors, influencers, and those in decision-making roles who are focused on strengthening the cloud security of the organization. This book will also benefit the supporting staff, operations, and implementation teams as it will help them understand and enlighten the real picture of cloud security.

The right audience includes but is not limited to Chief Information Officer (CIO), Chief Information Security Officer (CISO), Chief Technology Officer (CTO), Chief Risk Officer (CRO), Cloud Architect, Cloud Security Architect, and security practice team.

AUTHOR BIO

Ashish Mishra is a seasoned IT professional and author who has more than 19 years of experience in the industry. He holds a strong grip and command of IT (Information Technology), IS (Information Security), and Cybersecurity domains. Ashish is also experienced in managing large IT and IS Operations, Strategy Building, Transformation Journey, Project and Program Management, and Service Delivery.