Guest:  <ul> <li style="font-weight: 400;" aria-level="1"><a href= "https://www.linkedin.com/in/erlander-lo-elo">Erlander Lo</a>, Security and Compliance Specialist @ Google Cloud</li> </ul> Topics: <ul> <li>Imagine you are planning a data warehouse in the cloud, how do you think about security?</li> <li>What are the expected threats to a large data store in the cloud?</li> <li>How to create your security approach for a data warehouse project?</li> <li>Are there regulations that force your decisions about security controls or  approaches, no matter what the threats are?</li> <li>How do you approach data governance for this project?</li> <li>What controls are there to implement in Google Cloud for a secure data warehouse effort?</li> </ul> Resources: <ul> <li style="font-weight: 400;" aria-level="1"><a href= "https://cloud.google.com/architecture/confidential-data-warehouse-blueprint"> Secure Data Warehouse blueprint</a> (other <a href= "https://cloud.google.com/security/best-practices">blueprints</a>)</li> <li style="font-weight: 400;" aria-level="1"><a href= "https://books.google.com/books/about/Creativity_Inc.html?id=UqccAgAAQBAJ"> Creativity Inc</a> book</li> <li style="font-weight: 400;" aria-level="1"><a href= "https://www.google.com/books/edition/_/iQYiEAAAQBAJ?hl=en">“Data Governance: The Definitive Guide”</a> book</li> </ul>

EP57 Stop Zero Days, Save the World: Project Zero's Maddie Stone Speaks

Cloud Security Podcast by Google focuses on security in the cloud, delivering security from the cloud, and all things at the intersection of security and cloud. Of course, we will also cover what we are doing in Google Cloud to help keep our users' data safe and workloads secure. 

We’re going to do our best to avoid security theater, and cut to the heart of real security questions and issues. Expect us to question threat models and ask if something is done for the data subject’s benefit or just for organizational benefit. 

We hope you’ll join us if you’re interested in where technology overlaps with process and bumps up against organizational design. We’re hoping to attract listeners who are happy to hear conventional wisdom questioned, and who are curious about what lessons we can and can’t keep as the world moves from on-premises computing to cloud computing.