Cloud Security Architect

Just a humble Cloud Security Architect. Sharing my own experiences and learning from others.#aws #security #Cloud #Architect

[Cloud Security Architect @CloudSecArch]

A "strong" security posture — green across every RAG status — that wouldn't survive one motivated adversary.
Maturity scores tell you what should hold. Testing tells you what it does.
Next board pack: ask for your last control-validation result, not your maturity score. #CISO

[Cloud Security Architect @CloudSecArch]

NIST's Cyber AI Profile gives you three jobs: secure your AI, defend with AI, thwart attackers using AI
In a bank, those three sit in three teams, on three budgets, with no shared owner.
It's an operating-model gap not a control gap. You'll pass the controls and lose at the seams

[Cloud Security Architect @CloudSecArch]

AI agents are the enterprise's newest unmanaged attack surface

[Cloud Security Architect @CloudSecArch]

Everyone read the Five Eyes agentic AI guidance as a risk list.

The real line: every agent needs a cryptographically anchored identity + short-lived credentials.

Identity is the control plane. Capability is just the workload.

Stop giving agents passwords. Give them passports.

[Cloud Security Architect @CloudSecArch]

Everyone read the Five Eyes agentic AI guidance as a risk list.
The real line: every agent needs a cryptographically anchored identity + short-lived credentials.
Identity is the control plane. Capability is just the workload.
Stop giving agents passwords. Give them passports.

[Cloud Security Architect @CloudSecArch]

A good intro video to agents from Anthropic’s head of product

[Cloud Security Architect @CloudSecArch]

@claudifytech Can you use Claude code, cursor and windsurf on parallel on different Issues under the same project with this ?

[Cloud Security Architect @CloudSecArch]

Audit trails don’t break when agents start acting. They just stop recording who decided. The assumption that a control owner is a person is quietly collapsing.

#AIGovernance

[Cloud Security Architect @CloudSecArch]

@Ledger I want to buy and was wondering if there is a promotion or discount code I can use.

[Shann³ @shannholmberg]

https://t.co/wARQPGs5FT

[CyrilXBT @cyrilXBT]

https://t.co/lkRFCBt82J

[CyrilXBT @cyrilXBT]

https://t.co/N7aHgeY2Lx

[Cloud Security Architect @CloudSecArch]

AI SOC is the future and projects like these are making it a reality

check it out

https://t.co/jDpDBwF4Ek

[AISecHub @AISecHub]

https://t.co/zF8eBm8ijk

[Cloud Security Architect @CloudSecArch]

Follow for practitioner takes on security, AI governance, and financial services risk.

[Cloud Security Architect @CloudSecArch]

1/ UK financial services is absorbing AI accountability pressure from three regulatory directions at once. Most institutions are not ready for any of them. /thread

[Cloud Security Architect @CloudSecArch]

7/ Under SMCR, AI accountability lands on a named individual — not a contract clause. The board question is no longer "which AI tools do we approve." It's "who owns the outcome when the supplier's AI behaves unexpectedly." That is a governance architecture decision.