Data Controller vs Data Processor in the Cloud

Presenter:
Shankar Chebrolu, CCSP, FIP
Director of Security Architecture
Red Hat

Agenda

● Introduction to Top Threats to Cloud Computing
○ Egregious Eleven from CSA
○ Security Responsibilities Matrix: Cloud Consumer vs Cloud Provider

● Introduction to Global Privacy Laws & Regulations
○ GDPR, CCPA
○ Data Protection Accountability - Data Controller vs Data Processor

● What needs to be done?
○ Cloud Provider (Data Processor) Risk Assessment
○ Contractual obligations

■ Data Protection Addendum (DPA)

● Q/A

11:30 - 11:50 - Check In, Networking, Lunch (Thanks to TrendMicro!)
11:50 - 12:45 - Presentation
12:45 - 1:00 - Wrap Up, Additional Networking

Lunch will be provided by TrendMicro! They will have a presence at the meeting as well to answer any questions, but feel free to visit their site at www.trendmicro.com to learn about their CloudOne Platform & how they're enabling security services for the world's foremost cloud builders.