1. Today’s cloud and preparing for tomorrow’s
G6 Wednesday March 21st 2018, 10:30 AM - 11:45 AM
Today’s cloud and preparing for tomorrow’s
March 21st 2018
10:30 AM - 11:45 AM
Randall Brooks
Engineering Fellow, Raytheon
@randallsbrooks
Jon-Michael Brook
John Yeoh

2. Overview
The focus of this discussion is on three main topic areas surrounding the cloud road map:
Development,
Compliance, and
Future Preparation

3. Development
Creating a secure application with software assurance for the Cloud:
What does the group think are the applicable risks to applications moving to the Cloud?
The expected key discussion points should last 10 minutes each in an open dialog to enable others to learn from successes and failures.

4. Development
Creating a secure application with software assurance for the Cloud
What does the group think are the applicable risks to applications moving to the Cloud?
What are the key resources for developing Cloud applications?
The expected key discussion points should last 10 minutes each in an open dialog to enable others to learn from successes and failures.

5. Development
Creating a secure application with software assurance for the Cloud
What does the group think are the applicable risks to applications moving to the Cloud?
What are the key resources for developing Cloud applications?
What are the key tools used for secure development?
The expected key discussion points should last 10 minutes each in an open dialog to enable others to learn from successes and failures.

6. Development
Creating a secure application with software assurance for the Cloud
What does the group think are the applicable risks to applications moving to the Cloud?
What are the key resources for developing Cloud applications?
What are the key tools used for secure development?
How does the growing role of DevSecOps affect your enterprise?
Any examples to share?
The expected key discussion points should last 10 minutes each in an open dialog to enable others to learn from successes and failures.

7. Compliance
Compliance in the Cloud - Measurements, reporting and automation
How does your organization determine the applicable and appropriate measurements?
The expected key discussion points should last 10 minutes each in an open dialog to enable others to learn from successes and failures.

8. Compliance
Compliance in the Cloud - Measurements, reporting and automation
How does your organization determine the applicable and appropriate measurements?
How is compliance reported to executives?
What is their reaction?
The expected key discussion points should last 10 minutes each in an open dialog to enable others to learn from successes and failures.

9. Compliance
Compliance in the Cloud - Measurements, reporting and automation
How does your organization determine the applicable and appropriate measurements?
How is compliance reported to executives?
What is their reaction?
Does your organization support automation for continuous checking and real-time notification?
The expected key discussion points should last 10 minutes each in an open dialog to enable others to learn from successes and failures.

10. Future Preparation Preparing an organization for Tomorrow's Cloud
Move forward, how does are organization manage the growing supply chain of third party providers and solutions?
The expected key discussion points should last 10 minutes each in an open dialog to enable others to learn from successes and failures.

11. Future Preparation Preparing an organization for Tomorrow's Cloud
Move forward, how does are organization manage the growing supply chain of third party providers and solutions?
In 2018, how do you see your organization incorporating new technologies such as IoT, DevOps, AI, Immutable, etc?
The expected key discussion points should last 10 minutes each in an open dialog to enable others to learn from successes and failures.

12. Future Preparation Preparing an organization for Tomorrow's Cloud
Move forward, how does are organization manage the growing supply chain of third party providers and solutions?
In 2018, how do you see your organization incorporating new technologies such as IoT, DevOps, AI, Immutable, etc?
How does your organization intend to fill the Cybersecurity skills gaps needed to implement these (e.g. training, automation, etc.)?
The expected key discussion points should last 10 minutes each in an open dialog to enable others to learn from successes and failures.

13. Engineering Fellow, Raytheon
Randall Brooks
Engineering Fellow, Raytheon
@randallsbrooks
Jon-Michael Brook
John Yeoh

14. Bio
Mr. Randall Brooks is an Engineering Fellow for Raytheon Company (NYSE: RTN), representing the company within the U.S. International Committee for Information Technology Standards Cyber Security 1 (CS1). Brooks has more than 20 years of experience in Cybersecurity with a recognized expertise in Software Assurance (SwA) and secure development life cycles (SDLC). In addition to holding eight patents, Mr. Brooks is a CCSK, CISSP, CSSLP, ISSEP, ISSAP, and ISSMP. Brooks graduated from Purdue University with a Bachelors of Science from the School of Computer Science.