Uploaded August 2026 | Updated September 2026, 2 weeks ago
In this episode of CISO Stories, Jessica Hoffman sits down with Matt Lee to explore attack surface management, AWS security, and the cloud misconfigurations that can put organizations at risk.
Matt shares lessons from his experience auditing cloud environments, including common AWS security gaps around identity and access management, exposed resources, security groups, and overly permissive access. The conversation also covers emerging challenges around AI agents, protecting production data, and balancing speed of innovation with security controls.
From preventing cloud breaches to building stronger security practices, Matt breaks down what organizations should understand about reducing risk in today’s evolving threat landscape.
Segment Resources:
schematical.com/techdebt
oreilly.com/videos/zero-to-hero/0642572107789
schematical.com/posts
schematical.com/free
schematical.com/speaking
This segment is sponsored by Horizon3. Visit cisostoriespodcast.com/horizon3 to learn more about them!
Show Notes: cisostoriespodcast.com/csp-227
00:00:00 Understanding Attack Surface Management and Cloud Security Risks
00:04:21 Identifying and Fixing AWS Misconfigurations and IAM Issues
00:09:27 The Cost of Neglecting Security and Top Audit Findings
00:17:05 From QBasic to Cloud: Navigating Evolving Cyber Threats
00:20:05 Implementing WAF and Rate Limiting for Robust Security
00:23:23 Life Lessons and Final Thoughts from Matt Lee
In this episode of CISO Stories, Jessica Hoffman sits down with Matt Lee to explore attack surface management, AWS security, and the cloud misconfigurations that can put organizations at risk.
Matt shares lessons from his experience auditing cloud environments, including common AWS security gaps around identity and access management, exposed resources, security groups, and overly permissive access. The conversation also covers emerging challenges around AI agents, protecting production data, and balancing speed of innovation with security controls.
From preventing cloud breaches to building stronger security practices, Matt breaks down what organizations should understand about reducing risk in today’s evolving threat landscape.
Segment Resources:
schematical.com/techdebt
oreilly.com/videos/zero-to-hero/0642572107789
schematical.com/posts
schematical.com/free
schematical.com/speaking
This segment is sponsored by Horizon3. Visit cisostoriespodcast.com/horizon3 to learn more about them!
Show Notes: cisostoriespodcast.com/csp-227
00:00:00 Understanding Attack Surface Management and Cloud Security Risks
00:04:21 Identifying and Fixing AWS Misconfigurations and IAM Issues
00:09:27 The Cost of Neglecting Security and Top Audit Findings
00:17:05 From QBasic to Cloud: Navigating Evolving Cyber Threats
00:20:05 Implementing WAF and Rate Limiting for Robust Security
00:23:23 Life Lessons and Final Thoughts from Matt Lee
