Bill Phelps (Managing Director of Security Programs, Accenture)'s presentation on observations of cloud security trends at the NYC Alert Logic Cloud Security Summit on June 14th, 2016.

1. Making the Move
Enabling Security IN the Cloud
Accenture – AlertLogic NYC Summit, June 2016
Bill Phelps, Global Security Managing Director

2. 2
An Inevitable Migration
The Cloud Movement
Copyright © 2016 Accenture All rights reserved.
2Copyright © 2015 Accenture All rights reserved.
Private Clouds
SaaS
PaaS
IaaS
BPO
Hosting
On Prem
Virtualization

3. Our Role in the Cloud Eco-system
IDC just named Accenture a Worldwide Leader in Cloud Professional Services
© Copyright IDC. IDC MarketScape: Worldwide Cloud Professional Services 2016 Vendor Assessment, by Gard Little and Chad Huston, April 2016, IDC Doc # US40149616. Access the IDC
reprint: http://idcdocserv.com/US40149616e_Accenture

4. 4
Native Cloud Security
An enabling factor, but not a comprehensive security control strategy
Copyright © 2016 Accenture All rights reserved.
Customer Managed AWS security tools
LEGEND AWS Native Security Tools AWS Incremental Security Controls AWS Optimized Security Controls
Foundation Security
Configuration Management & Alerting
Config Rules
Security Assessment
Trusted AdvisorInspector
Identity, Access & Entitlement Management
IAM MFA Directory
Service
Security Information & Event Management
CloudTrail
Data Privacy and Protection
KMS Cloud
HSM
Direct
Connect
Governance & Risk Management
Training and SupportRegulatory Compliance
VPC NACLs VPN
Security
Groups
Cyber Defense
Services
AWS provides many of the security
building blocks that were separate
components in traditional
infrastructure – this enables a baseline
security posture through a single
source
The next level…
Much of what AWS provides should
act as input to existing security
requirements and capabilities (i.e.
CloudTrail, IAM/MFA)

5. Cloud Security – There is no silver bullet
Copyright © 2016 Accenture All rights reserved. 5
Start with Enterprise Cloud Security Architecture…
Cloud Security
Reference Architecture
Public Cloud Security
Reference Architecture
Private IaaS
AWS Public Cloud
Security Reference Architecture
AWS Public Cloud Security
Technical Instantiation
Hybrid IaaS
IaaS
SaaS PaaS
…end with Platform-specific technical instantiation

6. (1) Speed to value & elasticity
(2) Purpose built to leverage native security services
(3) Extends into enterprise security architecture
(4) Managed security governance
Alert Logic is in the cloud, instant on,
integrated and priced aaS
Punching Above your Weight with Alert Logic
Shift in level of security sophistication deployable in short timeframe
Log, Threat and Web App Security – used
to take a year for simple deployments; now
deployed in a matter of days or weeks
$

7. Key Take-Aways
Copyright © 2016 Accenture All rights reserved. 7
Bringing it all together – cross-Cloud security strategy to operations
• Native capabilities of aaS platforms are starting point not an ending point –
they are necessary but not sufficient
• Secure Cloud architecture requires a set of additional capabilities to meet
different data protection, IAM, governance, monitoring requirements
• More and more clients are trying to do this at the EA level, not at the individual
application level – which gives better scale, consistency & repeatability
• Cloud is accelerating – larger and more complex migrations, more business
critical applications that require more robust security

8. 8Copyright © 2016 Accenture All rights reserved.
Thank you
Bill Phelps
Accenture Security Lead
Global Managing Director
Bill.Phelps@accenture.com