Cloud Security Alliance

Think, think about, think about the whole remember the industry for mobile device management? Where is that today? It's gone 'cause we've given up, right? Um, and networking is more important and more built in to everything we do, so zero trust operational principle, don't forget it.

Yeah, and I'll note in our most recent, um, Human Infrastructure newsletter, uh, the Cloud Security Alliance just released, uh, a blueprint or a framework around implementing zero trust.

I believe it's fairly vendor neutral.

It's more about principles and practices than it is about products, which I think is the way to go.

Where is that today? It's gone 'cause we've given up, right? Um, and networking is more important and more built in to everything we do, so zero trust operational principle, don't forget it.

Yeah, and I'll note in our most recent, um, Human Infrastructure newsletter, uh, the Cloud Security Alliance just released, uh, a blueprint or a framework around implementing zero trust.

I believe it's fairly vendor neutral.

It's more about principles and practices than it is about products, which I think is the way to go.

Now, I think the...

So the Cloud Security Alliance has some good guidance around this and some procurement guidance that I think is interesting, um, that we've got linked in here.

Um, but it look...

So they're saying, I think, they noted like they think hundreds of thousands of devices, a hundred thousand devices could be the number that are impacted.

There's German brands, there's RV, there's re-remote, remote things.

There's, like, on-the-go wireless router.

Um, so there's a whole list in the Cloud Security Alliance, um, where they've d-dug through, like, model numbers and firmware versions and patents and ev-everything that they could find related to supply chain.

Yeah.

So it looks like what happened... based on the larger population.

So the Cloud Security Alliance has some good guidance around this and some procurement guidance that I think is interesting that we've got linked in here.

So they're saying, I think, they noted like they think hundreds of thousands of devices, 100,000 devices could be the number that are impacted.

The researchers were able to tell how many, like a small population based on they were able to take and purchase a domain that was involved in some of what these things were calling out to, but it's a backup domain that only some of the devices were using and not...

There's remote things.

There's like on-the-go wireless router.

So there's a whole list in the Cloud Security Alliance where they've dug through like model numbers and firmware versions and patents and everything that they could find related to supply chain.

Yeah.

The role of control frameworks, AACM, and AI governance.

One of the central messages is the importance of adopting control frameworks, such as the Artificial Intelligence, Controls Matrix, AICM, from the Cloud Security Alliance.

These types of frameworks allow innovation to occur securely, auditably, and aligned with business objectives.

The speed of innovation cannot outpace the capacity to govern it.

And they may or may not have had a lot of security training.

They may think an eight character password's okay for anything you want to do, right? And so what else is factual potentially? Well, let's assume that the CSA, the Cloud Security Alliance, who did a study in January of this year.

And there was an online study and they surveyed, they got responses from 228 organizations.

And those organizations from around the globe of various sizes said that 68% of organizations can't differentiate or can't distinguish an action, whether it was taken by a human, an AI action, or an agentic AI.