My thoughts, highlights etc., from the last 12 months
Originally Created on LinkedIn (https://www.linkedin.com/pulse/2024-retrospective-richard-hogan-npkve/?trackingId=nxk4CHbgTMi9P%2Fued9WBHQ%3D%3D)
Introduction
Welcome to the first edition of Reaching for the Cloud, a new bi-weekly newsletter focusing on news related to the IBM partnership with Microsoft and new features, and insights from the field related to Microsoft Azure, Microsoft 365 and Microsoft Security.
It is probably a little odd starting a new Newsletter with a retrospective, but it made sense to me, primarily, I suspect, due to the timing of the first edition.
For me, this has been an interesting (and challenging) year. It is the first full year where I have been working in the cybersecurity practice at IBM. Whilst I have always been conscious of the need to include security elements in my architectures and consulting engagements, working within the cybersecurity sphere has opened my eyes to the breadth, complexity and importance of security within the cloud space. My role has also changed from being a pure architect to a more GTM & strategic alliance focus. This has brought its challenges, but the change of focus is very welcome.
Security for AI, AI for Security
This year has brought many changes in the Microsoft cloud ecosystem, many of which have focused on Generative AI-based services (i.e. the various Copilots), both in terms of new features, use cases, and adoption. However, from my perspective, there are two almost competing scenarios: AI for Security and Security for AI. These scenarios revolve around how we use Gen AI to improve the security posture and response and how we secure our systems and models against Gen AI and traditional attacks targeting Gen AI systems.
At IBM, we have developed solutions and strategies that target both ends of this spectrum, from developing AI assistants which can help SOC analysts be more effective in identifying and mitigating threats (https://newsroom.ibm.com/2024-08-05-ibm-introduces-new-generative-ai-powered-cybersecurity-assistant-for-threat-detection-and-response-services), as well as creating a series of services designed to help organisations secure their Generative AI solutions, including services intended to mitigate against data leakage, supply chain and hallucinations (https://www.ibm.com/account/reg/us-en/signup?formid=urx-52506). These extensively leverage the Microsoft security stack, including Sentinel, Defender, Entra and Purview.
Looking forward to next year, I am particularly interested in how we look to further integrate AI and Security Copilot into our Threat Detection and Response solution, which will be further improved with the (hopefully) imminent release of a version designed specifically for Managed Security Service Providers (MSSPs). For more information on this, please see our recent white paper and webinar,
White paper: Unlocking the Value of Unified Security with Microsoft Defender and Sentinel (https://ibm.biz/msftcyberplatform).
Webinar: Accelerate cyber threat detection and response with IBM and Microsoft (https://ibm.webcasts.com/starthere.jsp?ei=1696478&tp_key=f457020e57)
Microsoft Ignite
I was lucky enough to be able to attend Microsoft Ignite in Chicago this year, and whilst there are too many announcements to review here, there were a few new features/takeaways that I wanted to highlight.
- Focus on Security: I don’t want to belabour the Cybersecurity angle in the first edition, but it was terrific to see the focus on security from Microsoft and the various partners in attendance (including IBM). Purview will be a key tool in the coming year
- OS Resiliency: The fallout from the CrowdStrike issue, is still resonating, with several announcements related to OS stability, resilience, especially the supply chain component.
- Azure Local: I know this may seem like a relatively small announcement and a potential re-branding of Azure Stack HCI, but I see several scenarios where a low-cost edge solution could be advantageous.
- Agentic AI: This was probably the most significant announcement at Ignite, and I can see why the evolution is occurring. Having “agents” who can perform specific tasks or are targeting a curated subset of data, in theory, will allow the agents to be more accurate and drive efficiency in those tasks instead of being a generic chatbot. It is worth noting that IBM Consulting Assistant is, in effect applying the same strategy and can be fully integrated with the various Copilots (sorry I feel that I am obliged to highlight IBM capabilities :-)).
There are many more areas that I could have brought up, but the always excellent Ignite Book of News is a great resource for all things Ignite, and I would recommend reading this if you have not already.
New Podcast
As anyone who has been on my feed will now, myself and two colleagues (David & Cyrus) have started a new YouTube channel/Podcast. It is early days and I am still learning how this all works, but I am having a tremendous amount of fun planning (ish), recording, editing and attempting to figure out the various algorithms of LinkedIn, X (almost called it Twitter) and YouTube to try and promote it.
We have covered a range of topics, including Maester, Radius, Azure Local, Zero Trust and my challenges with plane travel to the US.
This is available on most podcasting platforms and YouTube, a complete list of episodes/topics can be found on the corresponding blog site https://themicrosoftcloudblog.com/cloudy-with-a-chance-of-insights-the-podcast/
Recent Articles
An Introduction to Zero Trust on the Microsoft Cloud
Where I attempt to introduce the concept of Zero Trust and how you can start using Microsoft services such as Entra to implement a Zero Trust model in your environment.
- Part 1: https://www.linkedin.com/pulse/understanding-zero-trust-microsoft-cloud-part-1-richard-hogan-cbyee/?trackingId=quYOQazDT0muzaFGjMlQdw%3D%3D
- Part 2: https://www.linkedin.com/pulse/understanding-zero-trust-microsoft-cloud-part-2-richard-hogan-asioc/?trackingId=gh%2FnD0dy%2B1QytogyupKC0Q%3D%3D
Platformisation, a new cybersecurity paradigm?
I discuss the concept of platformisation and highlight some benefits and considerations for organisations considering adopting a platformisation strategy.
Considerations for Deploying Generative AI at scale
An article discussing the challenges organisations can face when deploying Gen AI tools and services across the enterprise and four areas where consideration should be given.
Mainframe Modernisation & AI.
Where Nigel Cain and Rich Diaz discuss how organisations can modernise mainframe applications, drive innovation, and maintain a competitive edge with AI
https://www.linkedin.com/feed/update/urn:li:activity:7271949125795954688/
