Security and Compliance in AWS Cloud

<p>In this episode of the Virtual Coffee with Ashish edition for Cloud Security Podcast, we spoke with <em><strong>Alexander J Yawn </strong></em>- ISC2 Miami Board Member | NABCRMP Founding Board Member</p> <ul> <li>Host: <a href="https://twitter.com/hashishrajan">Ashish Rajan - Twitter @hashishraja</a></li> <li>Guest: <a href="https://www.linkedin.com/in/alexanderjyawn/">Alexander J Yawn - Linkedin @AJYawn<br> </a></li> </ul> <p>In this episode, AJ &amp; Ashish spoke about</p> <ul> <li>What was your path into CyberSecurity?</li> <li>What does Compliance in Cloud mean for you?</li> <li>What is Shared Responsibility?</li> <li>How is Compliance different in a Hybrid world?</li> <li>For anyone who used to audit on-premise, is it difficult to audit cloud environments?</li> <li>There are so many AWS services for security, are those for monitoring or audit?</li> <li>Do Auditors need to be technical like Cloud Engineer to be successful as an auditor in Cloud?</li> <li>Auditors should be open to the idea of learning cloud?</li> <li>Do Auditors need to be Certified Architect?</li> <li>What are the some of the easy things to knocks off to start building foundation stuff?</li> <li>Is there a recommended time frame between audits in a cloud world?</li> <li>Can this Compliance task be automated?</li> <li>How is the GuardDuty report different to Trusted Advisor Report?</li> <li>Is there a company mandate to check these security services?</li> <li>What advice can you provide for preparing for an audit against specific compliance framework?</li> <li>Does a point in time check make sense in cloud?</li> <li>Does the cloud provider provide advice to their customer when they are not secure?</li> <li>How does compliance scale from a startup to an enterprise?</li> <li>Is there additional cost for multiple AWS Accounts?</li> <li>Where can auditors go to know more about doing Audits on Cloud?</li> </ul> <p><strong>ShowNotes and Episode Transcript </strong>on <a href="https://anchor.fm/dashboard