Securing Cloud Identity with Sonrai Security: An Introduction by CTO & Co-Founder Sandy Bird

Co-Founder of Sonrai Security, Sandy Bird, shares his comprehensive understanding of cloud identity issues, along with his prior experience as the co-founder at Q1 Labs and CTO of IBM's security division. He explains the mission of Sonrai Security and how Sonrai can help automate the cleanup of identity and permissions in cloud systems, often incurred by technical debt.
The video covers four crucial steps: removing unnecessary admin accounts, eliminating unused identities, working towards the principle of least privilege, and disrupting lateral movement. Sandy emphasizes that through these measures, although perfect implementation might not be possible, significant improvements in cloud security can be achieved.
00:00 Introduction and Background
00:31 The Problem with Cloud Security
00:56 The Solution: Sonrai Security
01:14 Four Steps to Secure Cloud
01:16 Identifying and Removing Unused Administrative Accounts
01:35 Removing Unused Identities at Scale
02:11 Implementing Least Privilege
02:32 Disrupting Lateral Movement
02:52 Conclusion