Security Operations, Reliability, and Securing Google with Heather Adkins

Guest:

• Heather Adkins, Sr Director, Information Security @ Google

Topics:

• Your RSA presentation has 3 pillars: zero trust, microservices, automation/zero prod, is this all you need to be secure & reliable in the modern world?
• Let's drill down again into the "secure and reliable" concept, are you sure that they are interrelated?
• Is there a risk that microservices could actually increase attack surface?
• What are the practical security upsides of "no touch production"?
• SRE and DevOps revolutionized IT, can we expect a similar revolution for security? Where would it come from?

Resources:

• "Building Secure and Reliable Systems" RSA 2021 presentation by Heather Adkins
• "Building Secure and Reliable Systems" book (free)
• "Modern Threat Detection at Google" (ep 17)
• Google BeyondCorp
• Google BeyondProd
• NIST 800-27 "Zero Trust Architecture"