Architecting Security for Regulated Workloads in Hybrid Cloud
summary
Presents a repeatable architectural method that forces threat modeling before coding, traces data flows from system context down to cloud deployment, and turns regulatory checklists into testable traceability from policy to test. Shows using a shared responsibility matrix and per-service RACI to decide who runs what, builds detection use cases and runbooks, and treats security services (PAM, IdP, secrets) as high‑SLA components—calls out real bank failures when those services aren’t sized for cloud scale.
AI-written summary · about
chapters (14)
- 0:00Intro
- 1:53Security Design Techniques
- 6:08Design, Architecture, Engineering and Operations
- 11:42Security Architecture skills are needed for multiple roles
- 14:14Security solution architecture practices
- 19:04Data-centric thinking using zero trust principles
- 20:38Understanding the scope, context and data
- 22:07Hybrid cloud built-in and built-on security policies
- 23:52Identify target cloud platform shared responsibilities
- 27:18Start threat modelling with the application
- 29:03Deploy to cloud platform integrating zero trust practices
- 30:35Mitigate through Detection and Response
- 31:58Decompose Shared Responsibilities into Security Services
- 34:53Traceability for Compliance
related talks
53mPractical Threat Modeling for real-world and Cloud Situations in our hybrid and W...
36mJourney towards Secure Architecture in the Cloud
50mArchitecting a secure cloud framework
31mA Comprehensive Approach to Cloud Security Posture Management
45mExploring and managing risks in cloud: a practical journey to cloud security
25mSecurity, Identity - Back to the Drawing Board?
48mControlling Clouds: Beyond Safety
50mAdapting First Order Security Principles to Newer Architectural Trends