

PP049: CSMM – A Practical Model for Improving Your Cloud Security
Feb 11, 2025
Rich Mogul, an expert in cloud security and educator at Black Hat and DEF CON, discusses the Cloud Security Maturity Model (CSMM). He explains how this practical framework offers tailored guidance for enhancing cloud security. Topics include the importance of measurable KPIs, the role of SMART objectives in governance, and building collaborative security frameworks. Rich emphasizes continuous assessment, self-assessment tools, and the need for clear communication between teams to strengthen security practices across organizations.
Chapters
Transcript
Episode notes
1 2 3 4 5 6
Intro
00:00 • 4min
Building Cloud Security Frameworks
04:14 • 16min
Navigating Cloud Security Governance with SMART Objectives
20:30 • 4min
Building a Cloud Security Model
24:24 • 10min
Navigating Cloud Security Maturity and Team Dynamics
34:11 • 4min
Exploring Community Contributions and Practical Tech Advice
37:47 • 5min