How Can Cloud Computing Transform Security?

TL;DR

Cloud computing can serve as a powerful force for security transformation when teams embrace disruption instead of treating change only as a threat. Security organizations should make bold, informed bets, respond quickly to business and attacker innovation, and improve how they use existing resources rather than relying on the unrealistic demand to do more with less.

Transcript

Yeah, squirrel, no doubt. Hey, how are you? So- I didn't expect the camera. No, I didn't expect the camera either. All right, so, uh, how many of you, if any of you, were in our presentation last year on a similar topic? Oh, good. All right. So last year we kind of got pigeonholed into, um, uh, the last day of the, or the last time period of the la... Read More

Key Insights

• Disruptive innovation is a product, service, or approach whose effects overturn the status quo. A technology may only improve an existing capability, while the new behaviors, operating models, or downstream consequences it enables create the actual disruption.
• Cloud computing is presented as both a disruptive force and a powerful opportunity for security transformation. Security teams can treat it solely as a collection of risks, or recognize that its changes may also provide solutions to persistent security and operational problems.
• Doing more with less is described as an inadequate answer to budget cuts, reduced headcount, compliance demands, and expanding responsibilities. The more useful objective is to accomplish more with existing resources by improving decisions, methods, and the deployment of available capabilities.
• Entrepreneurial thinking is defined as making bold and correct bets amid uncertainty. Security professionals are encouraged to adopt this mindset when business demands, cloud adoption, and limited time make conventional planning or purely defensive reactions insufficient.
• Disruption can affect users or participants elsewhere in a supply chain, and its scale can be incremental or large. Once a disruptive event has occurred, conditions do not return to their previous state, forcing organizations either to respond or bear the consequences.
• Business innovation is driven by competitive advantage, competitive response, or efficiency. Security teams must support these business changes even when the organization adopts technology for reasons that do not originate within the security function.
• Security is inherently responsive because teams must react to innovation by both the business and attackers. Attackers innovate for competitive and economic reasons too, with an organization's information or systems becoming the product they seek to exploit or sell.
• The key to managing security disruption is response speed and timely recognition of important indicators. Perfectly predicting the future is possible only to a limited degree, so teams should focus on noticing change early and turning their response into an advantage.

Questions & Answers

Q: How can cloud computing transform security?

Cloud computing can transform security by acting as both a disruptive force and a source of new solutions. Instead of viewing cloud adoption only as another problem imposed by executives, security teams can use the resulting changes to reconsider established practices, improve how existing resources are applied, and respond more effectively to business needs, operational constraints, and evolving attacker behavior.

Q: What is disruptive innovation in information security?

Disruptive innovation is a product, service, or approach whose effects overturn the status quo. The technology itself does not always have to be intrinsically disruptive. It may enable a new way of thinking or working, affect a participant elsewhere in the supply chain, and create incremental or large changes that require organizations and security teams to respond.

Q: Why is doing more with less a poor security strategy?

Doing more with less is a poor strategy because security teams already face compressed budgets, reduced headcount, lost professional development, compliance pressure, and expanding responsibilities. Repeating the demand does not resolve those underlying constraints. The proposed alternative is to do more with existing resources by improving how work is performed, making better decisions, and finding more effective approaches.

Q: How should security professionals think like entrepreneurs?

Security professionals should think like entrepreneurs by making bold and correct bets rather than responding mechanically to every new demand. This approach requires recognizing disruption, evaluating whether it represents a problem or a possible solution, and acting despite limited time and resources. It also involves learning how to navigate organizational systems while handling major deployments and cloud-related changes.

Q: Why is information security always a responsive activity?

Information security is responsive because security teams must react to two independent sources of innovation. The business introduces technologies and practices to gain competitive advantage, answer competitors, or improve efficiency. Attackers also innovate for their own competitive and economic reasons. Security teams must address both streams while also pursuing whatever internal efficiency improvements their resources permit.

Q: What drives businesses to adopt innovative technology?

Businesses innovate for three stated reasons: gaining competitive advantage, responding to a competitor's innovation, and improving efficiency. These motives can lead organizations to adopt new technologies regardless of whether security initiated or anticipated the change. Security teams must therefore understand business motives and prepare to support innovations that arise from strategic, competitive, or operational priorities.

Q: How can organizations respond to disruptive innovation?

Organizations can respond by treating disruptive innovation as something they can embrace and manage rather than as an event that merely happens to them. Once disruption changes the status quo, conditions will not simply return to their earlier form. Organizations must recognize the change, understand its effects on users and the supply chain, and adapt before delayed action imposes greater costs.

Q: How can security teams prepare for changes they cannot predict?

Security teams can prepare by accepting that prediction works only to a limited point. Their practical advantage comes from recognizing key indicators and responding quickly when business practices, technologies, or attacker methods change. Rather than trying to foresee every event, teams should understand the forces behind innovation and develop the ability to turn an early, effective response to their advantage.

Summary & Key Takeaways

• Security teams face shrinking budgets, reduced headcount, compliance pressure, and demands to move systems into the cloud. The proposed response is not simply doing more with less. Teams should improve how they use existing resources, think like entrepreneurs, make bold and correct bets, and learn to navigate organizational constraints effectively.

• Disruptive innovation is a product, service, or approach whose effects overturn the status quo. The underlying technology does not always create disruption by itself. Instead, it can enable new practices, affect participants elsewhere in a supply chain, and produce either incremental or large changes that organizations must eventually address.

• Businesses innovate to gain competitive advantage, respond to competitors, or improve efficiency. Security teams occupy a more reactive position because they must respond both to business changes and to innovations introduced by attackers. Security cannot predict everything, so success depends on identifying important indicators and responding quickly enough to gain an advantage.