a Futurum company
Rich Mogull

Contributing Writer

Rich Mogull

Rich has 20 years experience in information security, physical security, and risk management. He is a founder of DisruptOPS, a cloud operations and security platform, and the independent research firm Securosis. He is also the principle course designer of the Cloud Security Alliance training class, main writer of the CSA Guidance version 4, and actively works on developing hands-on cloud security techniques. Prior to founding DisruptOPS and Securosis, Rich was a Research Vice President at Gartner on the security team. Prior to his seven years at Gartner, Rich worked as an independent consultant, web application developer, software development manager at the University of Colorado, and systems and network administrator. Rich is the Security Editor of TidBITS and is a frequent industry speaker at events including the RSA Security Conference, Black Hat, and DefCon, and has spoken on every continent except Antarctica (where he's happy to speak for free -- assuming travel is covered).

5Articles shown
ContributorDevOps.com
Beats
BlogsclouddevopsAmazonautomationauditor

Latest from Rich

Blogs

Building Great Cloud Security Guardrails

Security guardrails are an incredible way to keep our cloud deployments safer without slowing things down. Taking this structured approach will minimize friction while increasing protection. When I first started working hands-on in cloud (AWS) around nine years ago, I quickly realized both the power and risks of just how darn fast and agile cloud […]

Oct 17, 2018 · 3 min

All articles by Rich Mogull

Showing 1–5
Blogs

Cloud Security: Software Defined. Event Driven. Awesome.

I get it. Cloud and DevOps are disruptive and create new risks. I’m a security pro; one with decades of hard-earned experience telling me that with great chaos comes great opportunity… for the bad as much as the good. And once again it’s time to circle the wagons, make sure policies are enforced, and our […]

3 min
Blogs

Security automation with DevOps: show me the code!

Last week Andrew Storms put up a good post hinting at the promise of security automation in [SecDevOps: Security Automation By Example – The Firewall Change]. He included an example of automating a series of actions when a firewall rule is changed. It’s a good article, although I’m increasingly convinced there’s no such thing as […]

3 min
Blogs

Hacking Your Auditor

No, not that kind of hacking, give me a little credit… Recently I was having a conversation with a consulting friend about DevOps, and he found himself in a bit of a tough situation. The organization he was working with was a pure cloud/DevOps shop, but one that was stepping into having the meet compliance […]

3 min
Blogs

Bootstrapping Chef (or Whatever) for Autoscaled EC2 Instances

I realize it is traditional to start writing a new blog with some background and a deep introspection as to the author’s personal motivation for writing said blog, but I’ve never been one for tradition. Thus, for my first official DevOps post, I think I’ll jump write in with a technical tutorial on a problem […]

3 min