1. Cloud Security IS Application-Centric Security
5/29/2018 8:35 PM
THR2083
Cloud Security IS Application-Centric Security
John Turner
Senior Director, Cloud Security
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

2. 95%
78%
of cloud security failures will be the customer's fault**, through 2020.
of companies report that their traditional security solutions don't work or have limited functionality in the cloud.*
*Based on a survey of 1,900 professionals. Source: 2017 Cloud Security Spotlight Report.| ** Gartner| *** Skyhigh

3. The cloud is not a data center – it’s more like a data center per app
The Good
Focused on Velocity
Dedicated Resources
App segmentation = dependency freedom
The Bad
More apps = more configurations and more variables = more flaws

4. Developers
Sys Admins

5. Developers
Sys Admins

6. Developers
Sys Admins

7. Developers
Sys Admins

8. Developers
Sys Admins

9. We’ve gone from this…
…to this

10. So What’s the Solution? Develop App Centric Security Solutions
5/29/2018 8:35 PM
So What’s the Solution?
Develop App Centric Security Solutions
Integrate Cloud Security Teams
Think Differently
Focus on Foundational Security Outcomes
Insert Security into CI/CD flow
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

11. How do we get there? Governance Cloud Protection Market Email Malware
Risk & Compliance
Malware
Application
Cloud
Governance
Messaging
Managed Security Service Provider
IAM
SecOps and IR
Market
Mobile
Device
Protection
Threat Intelligence
EPP
Data
Network and Wireless
Web
Specialized Threat
Analysis & Protection
Firewall

12. Build a culture of integrated security
App Based Security Reference Architecture
Integrate security along the CICD pipeline
Align maturity requirements to Governance Framework
Avoid trying to dig a moat around your app
Align your security delivery principles to the app delivery principles

13. 5 Points Slide Option, with Animation
Need to jump start or outsource your cloud security solution? Optiv can help. Optiv Offers:
Cloud Security Assessments
Cloud security architecture and implementation teams
Application & code security audits
Breach Simulation
Incident Response

15. Please evaluate this session
Tech Ready 15
5/29/2018
Please evaluate this session
From your
Please expand notes window at bottom of slide and read. Then Delete this text box.
PC or tablet: visit MyIgnite
Phone: download and use the Microsoft Ignite mobile app
Your input is important!
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

16. 5/29/2018 8:35 PM
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.