A Logo

Feel free to include my content in your page via my
RSS feed

Help Irongeek.com pay for
bandwidth and research equipment:

Subscribestar or Patreon

Search Irongeek.com:

Affiliates:
Irongeek Button
Social-engineer-training Button

Help Irongeek.com pay for bandwidth and research equipment:

paypalpixle


Shadow IT in the Cloud - Marisa Dyer, Jessica Hazelrigg Derbycon 2019 (Hacking Illustrated Series InfoSec Tutorial Videos)

Shadow IT in the Cloud
Marisa Dyer, Jessica Hazelrigg
Derbycon 2019

Shadow IT refers to technology that is procured outside of official channels, processes and/or procedures meaning they aren?t vetted or managed by the IT and Security organizations. We all know about Shadow IT and the risks and dangers that come with that but what about Shadow IT in the Cloud - now that?s a scary thought. Now you have data in the hands of others and NO ONE KNOWS about it which means there isn?t any governance around it either. How do we lock down data in the cloud and ensure we have everything in place to avoid data loss or breach while also giving the business and other teams the tools they need to do their work? How do we block these ?scary? cloud services like file stores, pdf merger sites, code beautifiers, etc. when cloud is quickly becoming the new normal?

Jessica is Director at USAA focusing on the security and availability of USAA?s platforms and endpoints including web security and cloud technologies. Prior to USAA, Jessica served as lead for an operational team supporting US cyber intelligence efforts along with military intelligence experience. Marisa is an Information Security Engineer at USAA focusing on managing and securing our web proxies, email and cloud technologies. She?s currently heading the way for the cloud remediation effort at USAA. Her previous roles at USAA include management of the API gateway and B2B teams.

Back to Derbycon 2019 video list

Printable version of this article

15 most recent posts on Irongeek.com:


    If you would like to republish one of the articles from this site on your webpage or print journal please contact IronGeek.

    Copyright 2019, IronGeek
    Louisville / Kentuckiana Information Security Enthusiast