Finding Security in Visibility and Ownership, Not More and More Tools
Published
In this Humans in Cyber episode, Gourav Nagar, Head of Information Security and IT at Upwind Security, examines how cloud security teams are operating in an environment where “containers spin up, do their job, and vanish in seconds,” making it harder to investigate incidents once the forensic trail is gone.
Nagar says teams are losing context, dealing with identity sprawl across multi-cloud environments, and facing limited visibility inside clusters as attackers move between microservices rather than through the perimeter.
He argues that runtime security has to be a priority because attackers exploit running systems. He warns that alert fatigue is corrosive, pushing teams into repetitive firefighting until they start ignoring alerts altogether.
Nagar speaks of a division of work where machines handle volume, pattern recognition, and rapid response, while humans focus on context, novelty, and judgment about what is truly malicious.
Clear prioritization and automation can reduce noise, but he says clear ownership, on-call accountability, escalation paths, and blameless analysis are essential to sustain operations.
Watch the full interview to understand why security foundations, not more tools alone, determine whether automation and AI actually strengthen defense.
Related
Get expert insights on threats, breaches, scams, and security trends — delivered every Monday.
Most Popular
Get expert insights on threats, breaches, scams, and security trends — delivered every Monday.
Most Popular