Cloud Security

FedRAMP 20x aims to replace narrative paperwork with automated validation and faster authorizations. Here's what cloud providers know so far and what to do now.

How to get SaaS sprawl under control: discover apps from SSO, expense and OAuth data, add SSO and SCIM, set consent policies, fix offboarding and assign owners.

How PCI DSS shared responsibility works in the cloud: provider AOCs, responsibility matrices under 12.8.5 and 12.9.2, IaaS vs. SaaS, containers, segmentation.

Cloud misconfigurations are vulnerabilities too. See the common ones and how to manage them with owners, SLAs, CIS Benchmarks and policy-as-code guardrails.

A practical guide to container vulnerability management: image scanning, base images, rebuilds, the CIS Kubernetes Benchmark and admission control.

Cloud security posture management (CSPM) continuously checks cloud configurations against benchmarks. Learn what it does, its limits, and how to roll it out.