54:45This recording is not available yet.
Categories
Cloud SecurityGovernance, Risk & LeadershipCompliance & RegulationCyber InsurancePeople, Culture & CareersSecurity Awareness
Sponsored by
About this session
Moderator Pierre Tocci runs a sponsor panel with Novipro's Martin Pelletier and Gilles Gagnon, joined by an OVHcloud representative introduced as Chris (Christopher) Reynolds. Pelletier walks through Novipro's annual pan-Canadian IT survey (the Portrait TI): most breached companies do not know they have been compromised, confidence in IT teams outpaces actual investment, internal actors are behind a large share of incidents, cyber-insurance uptake is low partly because companies cannot meet minimum requirements, security training is inconsistent, and business continuity plans exist but are rarely tested. Gagnon then presents Symfony, Novipro's OVHcloud-based platform for connecting on-prem, private-cloud, public-cloud and distributed environments with reduced egress fees. Reynolds explains data sovereignty in practice, contrasting GDPR, the US Cloud Act and China's Cybersecurity Law, how OVHcloud segments Canadian, US and European infrastructure by jurisdiction and legal entity to shield client data from foreign government requests, and details OVHcloud's free, always-on DDoS mitigation. Audience questions cover data residency when information crosses jurisdictions.
Plongez dans les défis et opportunités de la sécurité dans l'infonuagique grâce aux dernières statistiques du rapport “Portrait TI“. Cette session interactive, animée sous forme de panel, vous permettra de découvrir les enjeux actuels tout en explorant des solutions concrètes pour sécuriser vos environnements cloud. Assistez à une présentation exclusive des solutions MSSP de NOVIPRO et plongez dans leur environnement hybride unique, “Symphoni“, qui allie expertise multidisciplinaire et innovation. Rejoignez-nous pour une discussion enrichissante sur la sécurité dans le cloud.
Key takeaways
- Do not read a low reported breach rate as good news; most compromised companies in the survey did not know an attacker was already inside.
- Treat a business continuity plan as unfinished until it has been tested; roughly half of companies with a plan in the survey never test it.
- Confirm cyber-insurance eligibility requirements (documented, tested continuity plan) before assuming coverage is available.
- Map where each cloud provider's legal entity sits, since jurisdiction (GDPR, Cloud Act, China's Cybersecurity Law) determines who can compel access to your data, not just where servers are physically located.
- Segment infrastructure by region and legal entity if operating across the US, Canada and Europe, to keep data out of reach of the US Cloud Act.
