1. Automating security for better, continuous compliance in the cloud
12/7/2018 9:28 AM
THR2104
Automating security for better, continuous compliance in the cloud
Tim Prendergast
CEO and co-founder, Evident.io
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

3. CLOUD EXPOSED THE WEAKNESS OF TRADITIONAL SECURITY
Traditional Tools Ineffective
DevOps Outruns Security
Attacks Are Automated
Attack Surface Changed

4. EVIDENT SECURITY PLATFORM (ESP)
AWS LAMBDA
AWS SNS
AUTOMATED REMEDIATION
Dashboards, Reports, Alerts
3rd Party
Role-based Access Controls
Threat Detection
Guided Remediation
Audit & Compliance
Integrations
SecOps
Real-time Risk Analysis Engine
Continuous Monitoring
Custom
Signatures & Policies
Security
Analytics
REST API
SDK
AZURE FUNCTIONS
APIs
Cloud Control Plane
All Services, Regions & Subscriptions/Accounts

5. Cloud Also Made Traditional Compliance Impossible

6. Let’s do some Compliance Math
PCI DSS:
4 Accounts
12 Testable Controls
2,813 control checks
X 2.5 minutes per hours
NIST : 1 Account
35 Testable Controls
9,534 control checks
X 2.5 minutes per
397 hours or
10 weeks!

7. COMPLIANCE in 1 Click

8. ESP DEMO

10. Please evaluate this session
Tech Ready 15
12/7/2018
Please evaluate this session
From your
Please expand notes window at bottom of slide and read. Then Delete this text box.
PC or tablet: visit MyIgnite
Phone: download and use the Microsoft Ignite mobile app
Your input is important!
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

11. 12/7/2018 9:28 AM
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.