Secure Cloud Business Applications (SCuBA) 101

Cybersecurity and Infrastructure Security Agency (CISA) presentation · May 6, 2025

0:00/3m

3:31

0:00

1:00

2:00

3:00

3:30

Risk framing: misconfigurations as an access vector

Presentation

0:09 → 0:24(16s)

An agency official at CISA warned that misconfigurations were the initial access vector in nearly one-third of cloud-environment attacks in 2024, stressing that default settings in cloud applications often leave organizations exposed.

Keywords:

Speakers:

A Cybersecurity and Infrastructure Security Agency (CISA) presentation describing ‘Scuba,’ a suite of free tools, secure configuration baselines and engagement services intended to help organizations strengthen cloud application security, with guidance and automated assessment tools for Microsoft 365 and Google Workspace.

AI-Generated Content: All content on this page was generated by AI to highlight key points from the meeting. For complete details and context, we recommend watching the full video. so we can fix them.

Transcript

Unlock the transcript with a paid subscription