EP203 Cloud Shared Responsibility: Beyond the Blame Game with Rich Mogull

Topics covered:

• Let’s talk about cloud security shared responsibility.  How to separate the blame? Is there a good framework for apportioning blame?
• You've introduced the Cloud Shared Irresponsibilities Model, stating cloud providers will be considered partially responsible for breaches even if due to customer misconfigurations. How do you see this impacting the relationship between cloud providers and their customers? Will it lead to more collaboration or more friction?
• We both know the Jay Heiser 2015 classic “cloud is secure, but you not using it securely.” In your view, what does “use cloud securely” mean for various organizations today?
• Here is a very painful question: how to decide what cloud security should be free with cloud and what security can be paid? 
• You dealt with cloud security for a long time, what is your #1 lesson so far on how to make the cloud more secure or use the cloud more securely?
• What is the best way to learn how to cloud? What is this CloudSLAW thing?