Cloud Insights
Baselines, identity and monitoring practice for cloud environments.
The window between receiving credentials and finishing your security baseline is the riskiest part of the whole exercise. Close it quickly.
The single highest-value security change in a new account takes about five minutes.
Rotation fails when it is a heroic annual event. It works when it is boring and routine.
Perfect policies are a research project. A workable baseline takes an afternoon and removes most of the risk.
The single highest-value control available, and the one most often left half-done.
You can only ever investigate what you were already recording.
Pipelines hold the keys to production and are frequently the least guarded part of the system.
Most cloud networking mistakes come from accepting defaults that were designed for convenience.
The first twenty minutes matter more than the post-mortem. Have the order written down.
Most compliance work is ordinary good practice, written down and evidenced.