Did anybody check out the CloudBytes Connect virtual event yesterday? It's not too late!!! Virtual days continue with day 2 of 3.
https://web.cvent.com/event/356caa07-5b61-4592-a600-06e37119d1ac/summaryYesterday's theme of Transition to the Cloud was highlighted by David Lenoe at Adobe talking about vendor assessment and specifically the questions for cloud. Brendan Hannigan, CEO at Sonrai took everyone through de-risking digital transformation with cloud and Diana Kelly from Microsoft shared the latest malware attacks seen during the COVID-19 pandemic. There was also an exclusive interview with the Sophos team on digital transformation when transitioning to the cloud.
I pulled a couple CSA research publications that are both complementary and complimentary based on the talks we heard yesterday.
Consensus Assessment Initiative Questionnaire (CAIQ) - Updated in April with 310 questions to ask vendors categorized across 16 security control domains.
https://cloudsecurityalliance.org/artifacts/consensus-assessments-initiative-questionnaire-v3-1/Top Threats to Cloud - 11 top concerns, risks, vulnerabilities, and threats in cloud are evaluated and ranked.
https://cloudsecurityalliance.org/artifacts/top-threats-to-cloud-computing-egregious-eleven/