Guest: <ul> <li>Elliott Abraham, Security and Compliance Specialist @ Google Cloud</li> </ul> Topics: <ul> <li>We talk about lift and shift vs cloud native, what are these and are they fair characterizations?</li> <li>Is lift and shift always negative? Does it always harm security?</li> <li>Are security planning needs different between them?</li> <li>What are the fundamentals with security during cloud migration that you have to get right regardless?</li> <li>What’s your advice to a security team to help make a migration work well?</li> <li>How do you account for threat model differences in the cloud? Are cloud threats being more different or more the same to the classic ones?</li> </ul> Resources: <ul> <li style="font-weight: 400;" aria-level="1"><a href= "https://services.google.com/fh/files/misc/google-cloud-security-foundations-guide.pdf"> “Google Cloud security foundations guide”</a></li> <li><a href= "https://books.google.com/books/about/The_Phoenix_Project.html?id=mqXomAEACAAJ"> "The Phoenix Project" book</a></li> <li><a href= "https://cloud.withgoogle.com/cloudsecurity/podcast/threat-models-and-cloud-security/"> "Threat Models and Cloud Security" (ep12)</a></li> <li>"Preparing for Cloud Migrations from a CISO Perspective"  <a href= "https://cloud.withgoogle.com/cloudsecurity/podcast/preparing-for-cloud-migrations-from-a-ciso-perspective-part-1/"> Part 1 (ep5)</a> and <a href= "https://cloud.withgoogle.com/cloudsecurity/podcast/preparing-for-cloud-migrations-from-a-ciso-perspective-part-2/"> Part2 (ep11)</a></li> </ul>

EP34 Instrumenting Modern Application Stack for Detection and Response

Cloud Security Podcast by Google focuses on security in the cloud, delivering security from the cloud, and all things at the intersection of security and cloud. Of course, we will also cover what we are doing in Google Cloud to help keep our users' data safe and workloads secure. 

We’re going to do our best to avoid security theater, and cut to the heart of real security questions and issues. Expect us to question threat models and ask if something is done for the data subject’s benefit or just for organizational benefit. 

We hope you’ll join us if you’re interested in where technology overlaps with process and bumps up against organizational design. We’re hoping to attract listeners who are happy to hear conventional wisdom questioned, and who are curious about what lessons we can and can’t keep as the world moves from on-premises computing to cloud computing.