How do you evaluate or follow up on a vendor that utilizes cloud providers for data storage but claims to not have an internal network?

like
Posting as :
works at
You are currently posting as works at

Keep asking questions. How do they push their code to the cloud without an internal network or connection to the cloud? Do they have a VPN connection or tunnel to the cloud?

like

Wouldn't the client have ownership of the virtual assets on their instance of the cloud? If they are utilizing a service developed by the vendor and vendor controls the environment, then you can inquire for a third party assessment report conducted on the vendor to get more details

Lol. Appreciate your response k1, but this IS the response provided by the vendor during the third party assessment

Fully zero trust with no internal network? Employees are all WFH, and use their own home network

On your next video call with them, tell them you're not talking from a phone or a laptop.

Related Posts

How can I get my foot in the door with Microsoft?

like

Can anyone of the fishes working in Uber Amazon Microsoft Apple Facebook (Meta) Google Netflix Mercedes-Benz Research & Development India OnePlus India R&D Sony Corporation Adobe EY Boston Consulting Group Deloitte McKinsey & Company help me with referal?
I am actively looking for a change.

I have Around 8 years of experience in Sales & Product Operations and Program Management.
Skills: Program Management, Product Operations, Salesforce, customer success.

like

Which Bluetooth earphone to purchase for iphone13?

like

I was asked to create a workshop on advanced PowerPoint features. 1. What would you include? 2. How would you make it fun?

like

Is there anyone who could suggest me some certifications that I can do to grow myself technically? I am a functional business analyst with an experience of 6 years but want to groom myself into techno-functional role.
I am interested to learn cloud but not sure how it would help me as a BA.

Hi sharks, I have cleared 2 technical rounds of TSYS and Now Managerial Round is pending. I have read that they ask for expected CTC during managerial round and if you ask high CTC then they put your profile on Hold. So, how much CTC can I ask, my YOE- 3 years, Tech Stack- Java, Spring Boot and Microservices, Current CTC - 10.5 LPA
Please help!!

like

How do you find time to take breaks throughout the day and fight the urge to work through lunch?

like

I had cleared all the rounds in S&P and had salary discussion 1.5 month back. The HR is always saying the management is on leave and will soon get the approval and release offer. Today she shas asked for one more week to release the offer. Should I wait for it or move on. Are they waiting for some other candidate to join before rejecting me at last moment. Only 10 days of my LWD are left.

Hello IBMers,
IBM has offered me X amount ctc and i accepted it on portal....now got to know that market valuation for 10.3 yoe is greater than offered ctc....can i ask HR to increase the ctc and change the band...will they consider it?...not holding any counter offer as of now

like

First tee time of the year is tomorrow afternoon!

like

Curious if anyone has invested a big amount in one stock let’s say buying 150k of CRWD in may based on gut or conviction however you may put it. Want to have a discussion around lessons learnt and ways to derisk.

like

If you leave J2 and get another (new) J2, does the first J2 show up on new J2 background check? Assuming these are w2 roles. If so, how do you explain that? 🧐

like

Hi Fishes,

I have 3 offers in hand
Thermo Fisher Scientific , State Street and one service based company Capgemini Which one to opt? Thermo and state Street are product based. Package from Capgemini is slightly higher compared to both.

Please suggest me which one to opt to?

like
like

My partner and I bought our home back in 2020. We got a good deal, low rate. But we want to move into a more spacious SFH. However, as we all know this market is crazy. Everything we want costs $620k+ and bc of rates it makes our mortgage estimates $3500+. We are currently paying $2k. And it looks we need to sell the house simultaneously as look for a new one or our contingency isn’t as attractive. I know it’s based on personal circumstances. But what would you do? - not move, sell and buy?

like

Be honest, do you ghost? It's such a norm now, I don't even feel bad when I do it.

like

Anyone looking for a resource manager or creative recruiter?

like

Anyone here have some good leads for sending a colorist reel out? Just cut a new one and recently incorporated. Trying to get the ball rolling for when things pick back.

like

We use istation for testing. What monthly tips do you have? Please help!?

I have resigned and my agency is not counting my approved PTOs for two weeks. I put notice for 30 days, is there any way I can negotiate? Or is there any law that prevents companies to cancel hard earned PTOs?

like

Additional Posts in Cyber Security Bowl

New to the U.S., is the Healthcare Industry (via HIPAA), the only industry in the U.S. that legally mandates having a designated Privacy Officer? So for example, although GLBA has obvious privacy requirements, unlike with healthcare, financial institutions in the U.S. are not mandated by law to have a designated Privacy Officer?

like

For those who have passed the CIPM exam, what is it like (and how does it compare to the CIPP/US exam)?

I start my journey of being more technical today. I am giving myself 2 yrs. I started a role doing IT controls, Identity and Access Management work. I have prior experience in UAT, business process controls (A-123). I am planning on passing the Security plus and CISSP certs within 2 yrs. Have a TS clearance. Any advice or reality check is welcome.
I will like to do cyber work in the Intelligence Community.

like

Wonder if anyone can offer advice on which cert to pursue next? I obtained my CompTIA Security+ last year and wondering if I should go for the CySA+ or Pentest+ next. I also have my AWS CCP and will be sitting for the Solutions Architect soon as well. Currently not doing security stuff at work but would love to keep my skills going. I was hoping one of these next certs will help me finally break into a security role and love the idea of pentesting but not sure if the CySA+ is more beneficial.

like

Deloitte Cyber, how long did it take you to receive an offer after final interview?

like

Any company is hiring EU citizens and helping with visa? interested in moving to USA. I'm lawyer, cissp, cisa, cipp/e and specialized n data privacy, cybersec ops and risk management with 8+ years exp

Any thoughts on threat intelligence certs? Which ones are most worth the effort?

like

Any tripwire pros here? How did you get started?

like

Deloitte 🐠, does your company cover tech courses in the first year? Looking to make a move over there but also wanna take a SANS course soon

like

Tired of your job and want to come to KPMG Cyber Services? Drop me a burner here.

likefunny

Joining a group that specializes in incident response. Any recommendations on things I can do this summer to prepare on fundamentals/certs?

like

How to make a jump to cloud security when I just have SOC experience? Currently studying for Solutions Architect cert

like

Hi Fishes. I am currently holding offer from BP and Citi , both offering the same package for penetration tester. Any idea which is an overall better option to choose?

like

Privacy fish - Anyone taken the CIPM and can share what the exam is like?

Content outline seems like application of standard consulting approach, so how do they test it on an exam?

Other than a client project, what's a good way to get trained up on cloud security?

like

Views on carbon black as a product?

helpful

Any BCG Platinion Cyber folks here?
What kinna work do you guys do? Planning to make the switch after 5 years with Uncle D. Wanna hear from you guys about culture, projects and areas of expertise.

like

Anyone currently enrolled or will be enrolled in the online masters cyber degree at Georgia Tech?

like

Anyone ever heard of or worked for Sygnia?

like

How is Booz Allen cyber strategy and risk management consulting? Got a recruiter inquiry

like

New to Fishbowl?

Download the Fishbowl app to
unlock all discussions on Fishbowl.
That was just a preview…
Sign Up to see all discussions
  • Discover what it’s like to work at companies from real professionals
  • Get candid advice from people in your field in a safe space
  • Chat and network with other professionals in your field
Sign up in seconds to unlock all discussions on Fishbowl.

Already a user?
Login here

Share

Embed this post

Copy and paste embed code on your site

Preview

Download the
Fishbowl app

See what’s happening in your industry
from the palm of your hand.

A phone with Fishbowl app

Scan your QR code to download
Fishbowl app on your mobile

Download app

Sign up for free to view this conversation on Fishbowl

By continuing you agree to Terms of Use and Privacy Policy

Already have an account? Log in

Sign up for free to continue using Fishbowl

By continuing you agree to Terms of Use(New) and Privacy Policy(New)
Messaging rates may apply

Already have an account? Log in

For account settings, visit Fishbowl on Desktop Browser or

General

Legal