Implement the entire CNAPP lifecycle from designing, planning, adopting, deploying, and operationalizing to enhance your organization's overall cloud security posture.
Key Features
- Master the CNAPP lifecycle from planning to operationalization using real-world practical scenarios.
- Dive deep into the features of Microsoft's Defender for Cloud to elevate your organization’s security posture.
- Explore hands-on examples and implementation techniques from a leading expert in the cybersecurity industry
Book Description
Cloud security is a pivotal aspect of modern IT infrastructure, essential for safeguarding critical data and services. This comprehensive book explores Cloud Native Application Protection Platform (CNAPP), guiding you through adopting, deploying, and managing these solutions effectively. Written by Yuri Diogenes, Principal PM at Microsoft, who has been with Defender for Cloud (formerly Azure Security Center) since its inception, this book distills complex concepts into actionable knowledge making it an indispensable resource for Cloud Security professionals.
The book begins with a solid foundation detailing the why and how of CNAPP, preparing you for deeper engagement with the subject. As you progress, it delves into practical applications, including using Microsoft Defender for Cloud to enhance your organization's security posture, handle multicloud environments, and integrate governance and continuous improvement practices into your operations.
Further, you'll learn how to operationalize your CNAPP framework, emphasizing risk management & attack disruption, leveraging AI to enhance security measures, and integrating Defender for Cloud with Microsoft Security Exposure Management. By the end, you'll be ready to implement and optimize a CNAPP solution in your workplace, ensuring a robust defense against evolving threats.
What you will learn
- Implement Microsoft Defender for Cloud across diverse IT environments
- Harness DevOps security capabilities to tighten cloud operations
- Leverage AI tools such as Microsoft Copilot for Security to help remediate security recommendations at scale
- Integrate Microsoft Defender for Cloud with other XDR, SIEM (Microsoft Sentinel) and Microsoft Security Exposure Management
- Optimize your cloud security posture with continuous improvement practices
- Develop effective incident response plans and proactive threat hunting techniques
Who this book is for
This book is aimed at Cloud Security Professionals that work with Cloud Security, Posture Management, or Workload Protection. DevOps Engineers that need to have a better understanding of Cloud Security Tools and SOC Analysts that need to understand how CNAPP can enhance their threat hunting capabilities can also benefit from this book. Basic knowledge of Cloud Computing, including Cloud Providers such as Azure, AWS, and GCP is assumed.
Table of Contents
- Why CNAPP?
- Assessing your Environment's Security Posture
- CNAPP Design Considerations
- Creating an Adoption Plan
- Elevating your Workload's Security Posture
- Multicloud
- DevOps Security Capabilities
- Governance and Continuous Improvement
- Proactive Hunting
- Implementing Workload Protection
- Protecting Compute resources (Servers and Containers)
- Protecting Storage and Databases
- Protecting APIs
- Protecting Service Layer
- Incident Response
- Leveraging AI to Improve your Security Posture
- Extended Security Posture Management (XSPM)
Yuri Diogenes has been working at Microsoft since 2006, and currently he is a Principal PM Manager where he manages a Team of PMs for Microsoft CNAPP Solution, Defender for Cloud. Yuri is also a Professor at EC-Council University and Trine University. Yuri has a Master of Science in Cybersecurity Intelligence and Forensics Investigation from Utica College, and he is currently working on his PhD in Cybersecurity Leadership from Capitol Technology University. Yuri has published a total of 32 books, mostly covering information security and Microsoft technologies. Yuri also holds many industry certifications, such as CISSP, E|CND, E|CEH, E|CSA, E|CHFI, E|CTIA, CompTIA Security+, CySA+, Network+, CASP, and MITRE ATT&CK Cyber Threat Intelligence.
