💻Derick Devera

🔑 Simplify Access with AWS IAM Roles! IAM Roles enable secure, temporary access to AWS resources for users, apps, or services. No credentials to manage—just seamless permissions when you need them. Boost security and flexibility today! 🚀🔒 #IAM #Roles #Cloud #Computing

4

3 Comments

If cybersecurity is your thing register for #ServiceNowConnect- ServiceNow's first Security Symposium on Sept 24 and 25 at ServiceNow Santa Clara HQ. I am happy to be speaking at a breakout session with #Wiz on #integrating #SecurityWorkflows with High-Fidelity #CloudSecurityData from Wiz in ServiceNow. It's free for ServiceNow customers, subject to capacity limits. https://lnkd.in/gEjuGCTp

23

1 Comment

At OspreyBio, we use the cloud for some services (and soon, the edge), but the majority of our critical infrastructure is hosted on-prem. There are several reasons for this, from cost to our stringent security standards. How many times has Microsoft had a leak in the past year alone? With the value of our data, we can't afford to assume that cloud providers are immune to attacks or that their encryption is uncrackable even before considering quantum computing. But the biggest reason for our approach is trust—or the lack of it—when it comes to using cloud services for AI training data. A simple change to a Terms of Service agreement, often sent out via a quick email, can leave data exposed, as we've seen many companies do. Trying to remove PII doesn’t mean anything for the type of data we have and this isn't a risk we're willing to take, especially given that OspreyBio operates in such a novel space where our data and systems are unique and irreplaceable. It makes me wonder: how many other companies are starting to come to the same conclusion? Are they moving away from the cloud for more affordable, on-prem solutions? Are they shrinking their genetic data for easier storage and control, while still training their own AI models on it? The tools and technologies are out there—open source and accessible—and you don't need a ChatGPT agent to get started. It’s not for every business, but it should be considered first before jumping headfirst into the cloud. 

7

My keynote from the CloudNative SecurityCon has been posted -- I talk about storytelling and how we are applying this to the Security Education program at Okta. https://lnkd.in/gyVgxSbd

52

🌼 Redefining enterprise identity security with the IPSIE standard! 🌼 I’m thrilled to be leading IPSIE, a new working group in the OpenID Connect Foundation with the goal of creating an open standard that will unify how enterprises handle security across their SaaS app ecosystem. To start, we’re focusing on taking existing standards like OpenID Connect, SCIM, and the Shared Signals Framework, and trimming them down and removing unneeded optionality to profile them for use in an enterprise ecosystem that demands the highest levels of security. For SaaS builders, this means less time writing provider-specific integrations, and more time on the unique features of your applications! One of the most exciting parts of forming the IPSIE Working Group has been getting all the major players in identity security together in one place to tackle this challenge. It's not every day you get to work with such passionate, brilliant individuals, all united by a shared mission to create a safer, more secure ecosystem for enterprise apps. I can’t wait to get started on this collaboration to create the future of enterprise security! https://lnkd.in/eUudEX2j Pamela Dingle, Dean H. Saxe, Michael Jones, George Fletcher, Atul Tulshibagwale, Wesley Dunnington

278

5 Comments

Most engineering leaders have heard both good & bad about OpenTelemetry, and there are a lot of reasonable questions about whether it's the right time to adopt. If you are navigating this decision, Austin Parker has some helpful guidance for you. https://lnkd.in/gtZpgXP9

3

1 Comment

Last month at the Washington State IT Industry Forum & Modernization Summit, an WA State organization grappled with the challenge of streamlining intake and reporting processes. I shared a simple yet effective solution using Microsoft Forms and Teams: - Forms streamlined intake data collection. - Teams enabled seamless collaboration and data sharing. - Instant automated reports improved progress tracking. - Manual process time was notably reduced. Here’s an example of a simple customer feedback intake form: 👉 https://lnkd.in/gZnpyn_u Simplifying workflows can yield remarkable results. How are you streamlining your processes?

1

Me looking at the Crowdstrike outages affecting those customers and getting flashbacks of #DAT5958 with McAfee. Pour a shot of espresso out for those who have long weeks ahead of them. And even if you aren't a CS customer, you have work to do too. What customers, vendors, banks, logistics, SaaS platforms, and other service partners do you have and rely on who use CS? Crowdstrike has about 17% of the market in endpoint protection (number from 2022).

25

18 Comments

Thinking about migrating from Citrix but unsure where to start? Join Parallels Senior Director of Sales Engineering, Steven Dewinter, on October 8 for a live walkthrough that breaks down the migration process step by step. Get expert insights, real-world examples, and answers to all your questions in real time. Whether you're just exploring the idea or already knee-deep in the process, this session is for you.

4

Whether we call this machine identity, workload identiy or non-human identity, we need to invest in visibility, identity protection and governance, and critically, and we need standards to connect this all together. This is why efforts like the IETF's Workload Identity in Multi-System Environments (WIMSE) matters. #machineidentiy #standards #wimse #identity

23

3 Comments

And just like that, the future of another comprehensive national privacy law is uncertain. How many years have we been waiting for Congress to pass one? Almost too many to count. https://lnkd.in/gvxs5izG #privacy #dataprivacy

2

WASM, Developer Experiences and Kubernetes https://lnkd.in/epEAryrX Matt Butcher (@technosophos, CEO at @FermyonTech) talks about the evolution of WASM, the relationship with Kubernetes, and managing Developer Experiences with platforms.

5

1 Comment

With the recent VMware licensing and pricing hikes, xcp-ng + Zen Orchestra could be the alternative that you are looking for. To assist our clients with their VM strategy, SmartOptz team has set up 2 VMs using xcp-ng + Zen Orchestra to start testing. Personally, I do think this is a very attractive option to help organisations to save significant cost by migrating from VMware xcp-ng. Would your organisation consider this option?

6

Nudge Security Just Keeps Getting Better! Check out the latest feature. Not only can it give you visibility into your entire #SaaS landscape, with utilization and risk posture...now you can discover what you're 💲spending! 🌶 🔥 💸 #saassprawl #shadowit #cost #security #ciso

14

1 Comment

When you're JetBlue, the stability of your website is crucial. But stability isn't easy when your site is a major target. Enter Fastly's Next-Gen WAF and Bot Management solutions. Learn how we're helping the team keep both customers & the CISO happy: https://lnkd.in/g3Z4Tf8u

2