Best Approach To Cloud Security With Gary Dylina

it’s my pleasure.

So, you have to profile the new feature to determine capacity requirements and provision capacity for expected load with an appropriate margin for safety. Then make a test plan for how you will respond when the demand exceeds expectations by 2X and 10 X, important to make a plan and test it in advance, then scan the application for vulnerabilities and address those in intensive to release. And engage a skilled team of testers to perform an application security review or penetration test and close out any nonissues prior to release, will be my recommendation.

Ya, Sales, they will ask right. They want tools that they can use to accelerate closing deals. Customers need to have confidence they can trust providers to have security postures that’s equal to a better than their own. SOC 2 auto reports and ISO 27001 certificates are great tools to faster that confidence. But we need to meet customers where they are, but some customers will review reports and be satisfied, and others will want more information to develop an informed opinion about your security posture. You need to be prepared to engage in that process if you want to land business.

IAM! So, ‘Who needs access and to what will be one question, and how many roles are enough. You want to figure out how to bucket your users into groups that are logical collections and at the same access needs in order to be able to reduce the demand for individual access assignment activities. Consider how you will handle onboarding offboarding and role changes. Those moved adds and changes. Figure how you will validate access and review it periodically and figure how you will measure the success for that particular IAM deployment.

Thank you.

The right time is probably six months prior to when you actually make that hire. The goal of every hire should be to augment the existing team with needed capability. The correct time to hire for security focus team depends on the strings of the other team members.

Every start-up specially the Health tech startup needs to do the following things: identify appropriate technical controls frameworks, implement those control and verify their effectiveness, organise a third-party audit readiness assessment, conduct one or more compliance audits, and then prepare to demonstrate security competence during the sales process. If the existing team can do that, they have the expertise and bandwidth to address this issue , then it might be possible hiring a dedicated security person.

The risk is that delaying the start that would be costly if the result is a significant gap in controls. So the right time actually depends on the team and their existing capabilities.

So I identify with the capybara for its reputation for being kind to others.

That certification or passing an audit actually results in a good security situation. Those certifications and audits should be a result of having like should be easy and not a lot of work if you have good security practices and procedures in place.

So I like to see a demonstrated passion for continuous learning. That hints that look or appear as a variety of products or projects or outside I take these things like open source contributions, where you can see that the prospective candidate is passionate about doing development and learning and growing.

My 25-year-old self didn’t have the notion of like a dedicated security anything because it was before times. But I think just continuing to learn and grow right which has been my path to where I am now, finding interesting problems and solving them often the problems are related to something that’s gone wrong, and often things that go wrong or security issues and so, feeding that natural curiosity and growing knowledge around a wide variety tools and technologies has been successful for me and I think I would I would a highlight that.

One line quote that keeps me going, is from a fellow that I have a great deal of respect. A fellow named Michael Lopp, who said, ‘As managers we should be unfeelingly kind’

Thanks Purusottam.