Cloudy with a Chance of Chaos - Building a Shared Responsibility Model for Cloud Security

Learn about implementing an effective internal shared responsibility model for cloud security through this 21-minute conference talk from fwd:cloudsec. Explore how Booking.com developed their organizational approach to AWS security responsibilities, using the analogy of home security to explain the distinction between security OF versus IN the cloud. Discover practical strategies for defining clear security responsibilities within your organization, optimizing resource allocation, ensuring compliance, and fostering collaboration between teams. Drawing from real-world experience at Booking.com, gain insights into creating a comprehensive security framework that sets clear expectations for development teams while adapting to evolving security threats in cloud environments.