Cloudy With a Chance of Security: Be Sure to Pack Your Umbrella
Time 12/11/19 02:40PM-03:30PM
Room Grand Chenier (5th)
Many organizations know there are security implications of doing business in the cloud, and to address these implications - both positive and negative, they make risk decisions based on the assumption, that "they got it covered". But do they really, have it covered? Are the risks truly assessed, do they answer the who, what, where, and when? In this session, attendees with learn how deploy a "Cloud Umbrella" for mitigating these risks. The umbrella includes understanding FedRamp, how the RMF and CSF can be applied within a Cloud environment, and lastly, a template framework to ensure security coverage and protection. We also review how this same concept is being implemented with NOAA as case study. The review talks, about pain points, how we overcame the disruptions to change (i.e. political, social, technical), and lessons learned.
Speaker Lisa Love NOAA (National Oceanic & Atmospheric Administration)
Primary track Cloud Architecture
Secondary tracks Information Security