Planning and implementing a security strategy across teams
You should have a plan and strategy for security across all stakeholders. This plan is a key component to managing the security of your infrastructure. Security teams, networking teams, and infrastructure administration teams must all work together and have clearly defined roles to manage and maintain security baselines and continued protection for infrastructure, endpoints, identities, and data.
Cloud security requires a different way of thinking than traditional on-premises data center security. The physical security of the building, data center, and network interfaces is no longer “in-house,” and the IT and security professionals must collaborate on a consistent strategy to implement, monitor, and manage infrastructure, devices, identity, and data. This includes defining processes and guidelines that will make up the security baselines for the company.
Figure 7.1 outlines the full scope of roles and responsibilities...