Ghosts to Guardrails: Beyond the Alert-Driven Posture
Source: YouTube · SANS Cloud Security · published Oct 30, 2025 · 26:21
GitHub is rebuilding its cloud posture management program from the ground up to address modern security challenges 0:30.
Key Takeaways:
• The speaker, a cloud security architect at GitHub, is presenting the ongoing work and plans for their new cloud posture management program 0:30.
• The team has spent the last three years completely rebuilding this program, indicating a significant shift in their security strategy 0:40.
• This presentation shares the current state of the project, noting that the work is still in progress and not yet finalized 0:14.
• The goal is to identify new problems and refine the program as they continue development 0:22.
GitHub is proactively evolving its cloud security infrastructure to better protect its platform.
Sources:
- 0:30 Introduction to the speaker's role and the talk's focus on GitHub's cloud posture management.
- 0:40 Discussion of the three-year effort to rebuild the security program.
- 0:14 Clarification that the talk outlines plans and current status rather than final products.
- 0:22 Mention of finding new problems as part of the iterative development process.
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cloud Security. Commonly maps to: Security Architecture and Engineering, Communication and Network Security. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
My name is Sean McCulla. Um I I'm actually really excited about this talk because this talk is really based off of the work we are doing in GitHub. Uh it's not exactly word for word exactly what we're doing, but it is a construct of like this is the plan. This is what we're in the middle of and we're not done. So it's kind of neat to do a talk about where we're at and uh hopefully we'll find some more problems along the way as we keep going. So that's always kind of the fun part of these kind of conversations. Um just uh real quick uh so as he said I I am a cloud security architect with GitHub. I work on the team that runs our cloud posture management program. Uh and I I we spent the last three years rebuilding a brand new program and and I'll talk about that in the beginning. Uh right now…