Security & Operations 5 min read
Incident Readiness: Deciding Things Before You Need To
Incidents are not the time to make decisions. Preparation is deciding, in advance, what will happen — so the response is execution rather than invention.
Hardening, credential management, monitoring, backups and cost control for cloud environments.
Security & Operations 5 min read
Incidents are not the time to make decisions. Preparation is deciding, in advance, what will happen — so the response is execution rather than invention.
Security & Operations 4 min read
Most monitoring setups alert on everything and therefore on nothing. A small number of well-chosen signals beats a wall of dashboards.
Security & Operations 4 min read
A snapshot in the same account, in the same region, on the same provider is not a backup. It is a convenience that fails in exactly…
Security & Operations 4 min read
A monthly budget alert that fires at 80% tells you about a problem three weeks after it started. Here is what to set up instead.
Security & Operations 4 min read
Most cloud compromises trace back to a credential that should not have existed or should have been rotated. Both are process problems, not technology problems.
Security & Operations 5 min read
Treat any environment that changes hands as a system of unknown provenance. This is the order to work through, and why each step is in that…
Twelve providers, every configuration priced in the open.