Category: Security, Identity, & Compliance

Balance security with innovation – seamlessly integrate compliance controls behind intuitive self-service capabilities to empower data-driven productivity and agility.

We often advise AWS customers embarking on digital transformations to consider that cloud migration is part of digital transformation, and digital transformation must be driven by business outcomes. The effectiveness of your governance programs determines the success of your cloud migration and digital transformation. There will be an end to the cloud migration portion of […]

Recommended sessions for enterprise executives looking to accelerate digital transformation. On behalf of the entire Enterprise Strategy team at AWS, we’re looking forward to welcoming you to re:Invent 2022. With over 2,000 sessions including keynotes and leadership sessions, re:Invent provides an excellent opportunity to learn, share, and connect with your peers. We are excited to […]

Background As an Enterprise Strategist at AWS, I spend the majority of my time in two key areas when I meet with customers: all things digital transformation—people, process, technology, culture, aligning technology investments to business outcomes, cloud migration, organizational change, etc.; and security, compliance, risk, and privacy topics, due to my experience as a former […]

by Clarke Rodgers, Enterprise Strategist, AWS Enterprise Strategy Over the last several months, one of the most common discussions I have had with members of the C-Suite is around how to effectively report and/or discuss cybersecurity with the organization’s Board of Directors (BoD) and/or Senior Leadership Team (SLT). Background Before I get into the details, […]

In this guest post, Mignona Cote, the AWS Global Security Advisory lead, reports on her conversation with Jim Routh, Head of Enterprise Cybersecurity at MassMutual. Their discussion covers the challenges for CISOs who straddle the worlds of traditional information security and newer, digital. DevSecOps and cloud-based security paradigms. Ultimately, Routh says, CISOs must learn to […]

As part of a new video series of discussions with security leaders, Verified: Presented by AWS re:Inforce, AWS CISO Steve Schmidt sat down with Emma Smith, Global Cyber Security Director at Vodafone, for a discussion on the importance of diversity, equity, and inclusion in security teams. Watch the full video on YouTube. Emma, a Diversity […]

As part of Verified: Presented by AWS re:Inforce, a new video series of discussions with security leaders, AWS CISO Steve Schmidt sat down with Jason Chan, VP of Information Security at Netflix, for a broad-ranging interview. Even though we couldn’t be together this year at AWS re:Inforce, we still wanted to create a platform for […]

Introduction by Mark Schwartz This post continues our series on governance in the cloud. In earlier posts we discussed new strategies for governance, the governance that requires standardization and rules, and governance that oversees projects and investments. In another post John Thorp of AWS Professional Services wrote about AWS’s frameworks for evolving your Governance, Risk, […]

Introduction by Mark Schwartz In several earlier posts I discussed new strategies for governance in the cloud and the digital world in general. In the first, I talked about the kind of governance that requires standardization and rules. In the second, I wrote about governing projects and investments. The underlying point of these posts was […]