Tenable Blog

The perception that you only need to monitor traffic that’s happening on your network is extremely limiting, since customers are communicating “out of band” on many channels—such as Wi-Fi and Bluetooth—that you may not be monitoring, said Jayson E. Street (@jaysonstreet), infosec ranger at Pwnie Express in our conversation at the 2015 RSA Conference in San Francisco.

At the 2015 Security B-Sides conference in San Francisco, I caught up with Dave Lewis (@gattaca), global security advocate for Akamai, and Bill Brenner (@billbrenner70), senior technical writer for Akamai, for a conversation about big cloud mistakes. Here are their four suggestions on what to avoid.

At the 2015 RSA Conference in San Francisco, I asked random attendees about advice they had received about the cloud. Many cheekily responded, “I’m not on the cloud.” And then just for me, they pointed out that their phones are on the cloud and they probably use some webmail service, such as Gmail.

From a legal standpoint, businesses must do what is considered “reasonable” to secure their organization’s data. “Reasonableness” has been the standard for data security for about 20 years, said Kirk Herath, VP, associate general counsel and chief privacy officer, privacy, technology and contract services for Nationwide Insurance in our conversation at the 2015 RSA Conference in San Francisco.

At the 2015 RSA Conference, security evangelist Bruce Scheier challenged his audience: “Don’t ask if you should be in the cloud. Ask if the cloud is more secure [than] what you’re doing right now.”

Later during the conference, I posed that same question to Ben Rothke (@benrothke), Principal eGRC consultant with The Nettitude Group as to how you should determine which environment is more appropriate and secure for your data.