Bill Reid (Senior Manager of Security Solutions Architects) and Bill Shinn (Senior Principal in the Office of the CISO) is a broad ranging talk on the evolution of security leadership and best practices, and a must-see. In fact, consider checking out the whole security deep dive track!

NSA – Mitigating Cloud Vulnerabilities (PDF)

In January, the National Security Agency released an information sheet providing official guidance on cloud vulnerabilities. The document discusses threat actors, cloud-specific and general vulnerabilities, and common mitigation measures. It highlights four classes of cloud vulnerabilities:

misconfiguration poor access control shared tenancy vulnerabilities supply chain vulnerabilities

The infosheet is a great resource for both business leadership, with its perspectives on cloud security principles, and for technical professionals, due to its concrete details on vulnerabilities and mitigations.

MITRE ATT&CK Cloud Matrix

MITRENevertheless, only a few research studies on contradiction and coordination between water and energy resources in Central Asia have been reported. The contradiction and coordination between water and energy resources are among the key internal causes of the complexity of the transboundary water problem. With the accelerated promotion of the proposed "Silk Road Economic Belt" strategy, water and energy problems in Central Asia and Northwest China will pose severe challenges against further socioeconomic development of involved regions. In this paper, the complexity of the transboundary water problem in Central Asia is discussed based on water and energy distribution characteristics as well as demand features of different countries. Later, disputes and cooperation practices of Central Asian countries in transboundary water and energy resources are analyzed, and corresponding experiences and