Architecting a Secure Cloud Framework
Explore key principles for architecting a secure cloud framework, covering threat landscapes, shared responsibility, DevSecOps, best practices, and essential security capabilities.
How to Create a Breach-Deterrent Culture of Cybersecurity, from Board Down
Expert panel discusses strategies for creating a hacker-deterrent cybersecurity culture, bridging gaps between CISOs, compliance, and technology to protect company assets and improve ROI across all organizational levels.
Architecting Security for Regulated Workloads in Hybrid Cloud
Explore architectural practices for integrating security and compliance into regulated workloads on hybrid cloud, focusing on zero trust principles and transparent assurance.
How to Design and Execute Superior Employee Privacy Practices
Learn best practices for implementing employee privacy rules, understand new regulations, and gain insights into employee privacy expectations to achieve compliance and foster trust.
CISOs and Legal Uniting in a Post Uber and Twitter World
Explore strategies for improving CISO-GC relations, building trust, and advancing common interests in light of recent high-profile cybersecurity incidents and legal challenges.
Automating Security & Compliance - for Fun & Profit
Automating security and compliance in DevOps to balance innovation with risk management. Learn strategies for continuous testing, auditing, and ensuring compliance in modern IT infrastructure.
Move Fast But Don't Break Things
Discover strategies for maintaining startup agility while meeting enterprise demands. Learn to balance speed with stability, certainty, and compliance in software development for large-scale customers.
97 Things Every Cloud Engineer Should Know
Insights from cloud experts on essential knowledge for cloud engineers, covering architecture, migration, security, operations, and culture in a community-driven book.
Managerial Visions - Stories of Upgrading and Maintaining the Public Restroom with IoT
Explores IoT implementation in public restrooms, examining governance strategies, cost-reduction efforts, and regulatory techniques. Introduces "managerial visions" concept for understanding computer-mediated collaboration beyond white-collar settings.
GDPR and Third Party JS - Can It Be Done?
Explore GDPR compliance challenges for third-party JavaScript, examining privacy implications and potential solutions for data protection in web development.
Building Information Security Program from Scratch
Aprenda a construir um programa de segurança da informação eficaz, focando em métricas, gerenciamento de riscos e contratação de profissionais apaixonados pelo tema.
Here Be Dragons - The AWS S3 Logging Minefields
Explore AWS S3 logging challenges and potential security risks in cloud storage. Learn strategies to navigate complex logging configurations and enhance data protection in AWS environments.
Certification and Labeling in IoT
Explore IoT certification, labeling, and security standards with insights on UK practices, legislation, and future developments in the field.
The Transition Risk Assessment Risk Management
Explore risk assessment, regulatory compliance, and risk management strategies for effective information security, focusing on best practices and tools for organizations.
Optimize Kubernetes on vSphere with Event-Driven Automation
Explore event-driven automation for optimizing Kubernetes on vSphere, using VMware Event Broker Appliance to enhance availability, auditing, and compliance. Learn popular use cases and best practices from the K8s VMware User Group.
Cybersecurity for Real Life - Using the NIST Framework to Protect Your Critical Infrastructure
Explore NIST Framework for real-world cybersecurity, focusing on critical infrastructure protection, compliance, and practical implementation strategies.
Realizing Software Security Maturity - The Growing Pains and Gains
Explore software security maturity stages, from low to high, and learn strategies for building effective application security programs with practical insights and metrics.
Escalating Insider Threats Using VMware's API
Discover how VMware's API can be exploited to escalate insider threats, bypassing security measures that separate infrastructure and guest machine domains in enterprise environments.
The Myth of Twelve More Bytes - Security on Post-Scarcity Internet
Exploring security implications of IPv6, DNSSEC, and new top-level domains on enterprise IT, fraud prevention, and network defense in the evolving Internet landscape.
97 Things Every Cloud Engineer Should Know
Insights from industry experts on cloud computing essentials, covering architecture, migration, security, operations, and culture for comprehensive cloud engineering knowledge.
Information Security in University Campus and Open Environments
Explore campus information security challenges, attack vectors, and mitigation strategies. Learn about privilege escalation, password vulnerabilities, and best practices for protecting university networks.