Join Ashish Rajan, Snyk's Principal Cloud Security Architect and host of the Cloud Security Podcast, to discuss how cloud computing has transformed the IT landscape and enabled organizations to innovate faster and with more agility than they ever could in the data center. Additionally, the Shared Responsibility Model has relieved these organizations of the burdens of securing physical IT infrastructure, which is now the job of cloud service providers such as Amazon Web Services, Microsoft Azure, and Google Cloud.
But critical security responsibilities remain in the hands of cloud customers, and the scale, complexity, and dynamism of cloud environments and operations is creating new challenges for even the most sophisticated cloud and security teams. Attackers have become experts at exploiting new kinds of vulnerabilities that have emerged with the cloud, adding pressure to design environments to be inherently secure against them.
Snyk surveyed more than 400 cloud security and engineering professionals to learn from their experiences and gain new perspectives on the challenges they face, how they’re addressing them, and the impact of their efforts — both positive and negative.
During this event, we will share key insights from the Snyk State of Cloud Security 2022, including:
- Cloud security challenges and priorities across different teams and types of organizations
- The question of who owns cloud security and the challenges of cross-team collaboration
- The ROI of shifting left on cloud security and checking infrastructure as code pre-deployment
- The time it takes to fix vulnerabilities in open source projects has steadily increased, more than doubling from 49 days in 2018 to 110 days in 2021.
About the Presenter
Ashish Rajan is the host of the wildly popular Cloud Security Podcast, a CISO, CyberSecurity Influencer, a SANS Trainer for Cloud Security and an outspoken opinion leader on all things Cloud Security & DevSecOps. He is a frequent contributor on topics related to public cloud transformation, DevSecOps, Future Tech and the associated security challenges for practitioners and CISOs.