- Establishing and maintaining secure Cloud operations
is a matter of people and processes.
Make sure to focus on training
so that everyone understands their roles.
Successful security operations
are dependent upon proactive monitoring.
Securing your data is the most important element
around all security operations,
and this includes requiring transparency.
Meaning that we can only see what's going on,
and where, and react accordingly.
Make data available everywhere, either through APIs,
application programming interfaces,
or dashboards, allowing anyone to see the current state
of security and monitoring of the data.
Be proactive, not reactive.
Yes again, the data will provide you
with the ability to be proactive and predictive.
As you recall, both are important
to advanced Cloud security.
Mine data for patterns.
This will lead you to trends
that will lead you to finding issues
that need to be corrected.
Always evaluate KPIs, or key performance indicators,
or SLAs, or service level agreements.
Keep in mind that they are places
where the security tools will run into conflicts.
You need to get ahead of those.
Fast feedback loops trigger higher learning,
as well as providing real-time data as much as possible.
The number of security standards is daunting.
The good news is that most won't apply to you.
You do need to be aware of which standards are required,
and which ones are just helpful.
Standards should only be employed where there
are clear benefits.
Don't let this graphic scare you.
It's pretty much everything that you need
to do when doing Cloud operations and a few things more.
What's at issue here is that you need
to integrate security operations with Cloud operations,
including dealing with the same people,
processes and technology.
There cannot be a separate security operations team
and a separate Cloud operations team.
They need to be one unified team
in which everyone understands one another's roles and tools.
If you break down the process you'll see before you,
you'll understand that security
should be systemic to operations.
In the next video, we'll cover Cloud operations,
or Cloud ops in greater detail.
If you follow these processes and procedures here,
you'll find you do Cloud operations
and security operations correct the first time.