Real World Lessons Learned from 18 months of CIEM implementations in the Enterprise

Least privilege is a key part of any Zero Trust strategy. It was difficult on-prem and has gotten much worse as you move into a multi-cloud environment. When combined with a common cloud misconfiguration that is exposed on the internet, this can lead to a catastrophic breach. In this talk we’ll discuss what we’ve learned by implementing CIEM at large enterprises to help them get to least privilege. We’ll cover what the most common mistakes are, how many overprivileged users, groups, and service accounts are really out there, and how to get them to least privilege. You’ll leave this presentation with a list of go-do’s your team can accomplish within the next 30 days to strengthen your security posture across multiple clouds. SANS CloudSecNext Summit 2023 Real World Lessons Learned from 18 months of Cloud Infrastructure Entitlement Management (CIEM) implementations in the Enterprise Speakers: Bailey Bercik, Product Manager II, Microsoft Mark Morowczynski, Principal Program Manager, Microsoft View upcoming Summits: http://www.sans.org/u/DuS