Oman Chapter

The Cloud Threat Modeling document is attached for early release.  This is the latest release from the Top Threats working group.

Here is a brief description of the document -

The purpose of this document is to enable, encourage cloud, and security practitioners to apply threat modeling for cloud applications, services, and security decisions. To that end, this resource provides crucial guidance to help identify threat modeling security objectives, set the scope of assessments, decompose systems/applications, identify & rate threats, identify vulnerabilities in the system design, design and prioritize mitigations & controls, communicate/report, and call-to-action.

• Upcoming Cloudbytes
• How Unity Uses Continuous Risk Assessment to Empower its Google Cloud Estate - Orca / AWS / Unity on Wednesday 8/18 at 10am PDT
• Foresight is 20/20: How to Use Cyber Threat Intelligence for Proactive SecOps (IntSights) with Panorays on Thursday 8/12 at 11am PDT
• Recent Releases
• Protecting the Privacy of Healthcare Data in the Cloud
• Open Peer Reviews
• Top 10 Blockchain Attacks, Vulnerabilities & Weaknesses - open until 8/18
• Cloud Key Management System with External Origin Key - open until 9/10
• Roles and Responsibilities of Third Party Security Services - open until 9/10

------------------------------
Todd Edison
Chapter Relations Manager
Cloud Security Alliance
Bellingham WA
------------------------------