Automated Multi-Cloud Governance
The ONUG Collaborative delivered its first work in the Automated Cloud Governance ACG Working Group by publishing a framework. During the summer, the second phase of the Collaborative’s work began to develop a common security notification reference implementation–the start of multi-cloud security notification services. The outcome of this phase is to demonstrate multi-cloud provider security streams of a tenant’s resources containing common definitions and syntax of common events, logs, alerts, etc., upon which an enterprise governance/policy controller can take appropriate action. In this session, ACG Working Group members share their top down and bottom up approach in the development of the Simple Cloud Management Protocol to be demonstrated in May 2021 by cloud providers and SIME players all in an effort to create a marketplace of applications that automate cloud governance by automating responses to common security notifications across cloud providers.
Peter Campbell is Platform Security Engineer and Information Protection Senior Director at Evernorth Health Services. As Co-Chair of the ONUG Agentic AI Working Group, he leads efforts to define standards for securing autonomous AI agents and reducing Agentic AI risk.
With a technical foundation forged in the U.S. Navy, Peter brings a unique investigative lens to cloud security. His current research and consulting focus on Ransomware Resilience and DFIR, specifically leveraging AI to accelerate the forensic lifecycle in digital investigations. A holder of numerous advanced certifications (including CISSP and GCFA), he is committed to architecting resilient ecosystems that can withstand the next generation of extortion and automated threats.
John Willis is an experienced IT management professional with over 40 years of experience. He is currently conducting research on DevOps, DevSecOps, IT risk, modern governance, and audit compliance, as well as Generative AI. In the past, he has held various positions such as Senior Director at RedHat, VP at Docker Inc., Founder of Socketplane (which was later sold to Docker) and Enstratius (which was later sold to Dell), and VP at Opscode. He also founded Gulf Breeze Software, an award-winning IBM business partner specializing in Tivoli technology deployment.
John Willis is also an accomplished author, having written six IBM Redbooks on enterprise systems management and four books for IT Revolution, including the DevOps Handbook and Deming’s Journey to Profound Knowledge. He is working on his latest book, The Operational History of Generative AI.
