CISO Tradecraft® #263 - Stopping Attacks To Your Cloud Office Environment (with Rajan Kapoor)
24 snips
Dec 15, 2025 In this talk, Rajan Kapoor, VP of Security at Material Security, shares his valuable expertise in cloud workspace security. He discusses the expanding attack surfaces in cloud platforms like Google Workspace and Microsoft 365, emphasizing the need for robust protective measures. Rajan explains the importance of unified platforms to streamline investigations and reduce dwell time. He offers insights on using frameworks like MITRE to assess security maturity and addresses the risks posed by AI in data exposure, all while highlighting actionable steps for organizations to enhance their security posture.
AI Snips
Chapters
Books
Transcript
Episode notes
Focus Deeply On Cloud Office
- Focusing deeply on cloud office security can be more effective than trying to cover every service.
- Rajan Kapoor argues cloud office is target-rich and merits specialized tooling.
Map Tools To Frameworks
- Use frameworks like MITRE's Cloud Office matrix to map tools against tactics and spot overlap and gaps.
- Rajan Kapoor advises simplifying by ripping out redundant tools shown by the heat map.
Complexity Breeds Risk
- Complexity increases security risk and reduces team effectiveness.
- Rajan Kapoor ties tool sprawl and maintenance burden directly to increased gaps and risk.
