Cloud Computing und Security sind untrennbar miteinander verbunden. In meinem Vortrag werden Sie erfahren, wie (un)sicher Azure-Umgebungen eigentlich sein können, wenn Sie mit den Standardeinstellungen bereitgestellt werden und was wir tun müssen, um diese Umgebungen abzusichern. Mit Hilfe von spannenden Live-Demos werden wir uns unter anderem Storage- und Netzwerksecurity, Absicherung virtueller Maschinen, Azure Security Center und Verschlüsselung anschauen, aber auch Themen, wie Governance adressieren.

1. Tom Janetscheck
Sit back and relax while
I secure your Azure
environment
Azure Security Best Practices

2. Tom Janetscheck
Lead Consultant - BL Enterprise @ Alegri International Service GmbH
Focussed on Azure Infrastructure, Governance, Security
Microsoft Azure MVP & P-CSA
Twitter: @azureandbeyond
Blog: https://blog.azureandbeyond.com
About me

3. Cloud momentum grows
“The question is no longer:
‘How do I move to the cloud?’
Instead, it’s ‘Now that I’m in the
cloud, how do I make sure I’ve
optimized my investment and
risk exposure?”1
“By 2020 clouds will stop being
referred to as ‘public’ and
‘private’. It will simply be the
way business is done and IT is
provisioned.”²
1KPMG: 2014 Cloud Survey Report, Elevating business in the cloud, December 10, 2014
2IDC: IDC Market Spotlight, Cloud Definitions and Opportunity, April 2015

4. But cloud security concerns persist
Management is
increasingly
distributed
Cloud
environments are
more dynamic
Attackers
continue to
innovate

5. Cloud security is a shared responsibility
Securing and managing the cloud foundation
JOINT RESPONSIBILITYMICROSOFT COMMITMENT
Physical assets
Datacenter operations
Cloud infrastructure
Securing and managing your cloud resources
Virtual machines
Applications & workloads
Data

7. How can we achieve „security“?
1. Make sure to plan your infrastructure before you start!
2. Azure Governance is incredibly important!
3. „Friends don‘t let friends right-click publish!“
Donovan Brown

8. Azure Governance
Common
Sense
Resource
Locks
Resource
Groups
Management
Groups
Resource
Tags
Resource
Policies
RBAC

9. Demo
Azure Security Center