Willie Strydom, IT security problem solver at FNB, will be speaking at the ITWeb Cloud Summit 2017 in February. ITWeb events caught up with him.
ITWeb events: Why transition to the cloud? How has the cloud changed your role as an infosec professional?
Strydom: The transition to the cloud is a natural progression for anyone in IT operations. Many of us have been using the cloud for one or other application for years i.e. Google can be seen as a cloud search provider. Essentially this transition is merely a formalisation of a process we have already been using. As a result the security architect is able to provide solutions, rather than preventing them.
ITWeb events: How did you get into the business of infosec and, more specifically, security in the cloud?
Strydom: It was a natural transition. Starting out in IT security back in the nineties, the sole focus was network security. We were all focused on building strong barriers and gateways for people and applications to jump through. Our sole aim was to keep the bad guys out and the good guys in. Today attacks come in different forms. One of these is through applications, so those in security had to adjust accordingly. This was followed by patching and patch Tuesday was born. Despite being around for more than ten years now, many have yet to win this battle. Today the focus is on data security - applying security to the data itself, not the place where the data resides. Data is mobile and, as result, so is security.
ITWeb events: What advice would you give to start-ups/SMEs when it comes to the cloud?
Strydom: It is imperative that you fully understand exactly what you are getting into upfront. Do your research, bearing in mind that the consequences of not doing so can be long-lasting.
ITWeb events: Can you give us a snapshot of your presentation at the Cloud Summit in February 2017?
Strydom: The title of my presentation is how secure is the cloud really? Companies have balked at moving to the cloud due to the uncertainty surrounding data security. Bruce Schneier, a well-known security expert in the US, has been heard saying as far back as 2013, when asked about how secure the cloud is: "You have no way of knowing. You can't trust anybody. Everybody is lying to you". And even now, in 2016, organisations are still very wary, feeling exposed as a result of having to give up control of their data. They are still looking for the answer to the question: Could you data get lost, stolen, destroyed or corrupted? I will address these questions and more at the Cloud Summit in February 2017.
Share