The following podcast contains advertising.

To access an ad-free version of the Lawfair Podcast,

become a material supporter of Lawfair at Patreon.com slash Lawfair. That's Patreon.com

slash Lawfair. Also check out Lawfair's other podcast offerings, rational security, chatter, lawfare no bull, and the aftermath.

And many companies were, I would say, sold a story that Cloud could provide a lot more than it can actually provide.

It's the Law Fair Podcast.

I'm Stephanie Pell, senior editor at Law Fair.

With Maya Hammond, associate director

at the Atlantic Council's Cyber State Craft Initiative, Trey Her, Assistant Professor of Cybersecurity

and Policy at American University's School of International Service, and Director of the

Cyber State Craft Initiative at the Atlantic Council,

and Mark Rogers, co-founder and Chief Technology Officer for the AI Observability Start startup neighborhood.

Allowing folks to compete on security and actually make good security practice a

competitive differentiator is something that is a huge carry-up. The big chunks of the industry that will cost the federal

government nothing. Today we're talking about cloud security, the Cyber Safety Review Board

or CSRB's report on the Summer

2023 Microsoft Exchange online intrusion and lagging cloud policy.

Maya, Trey, and Mark, you published a lawfare article about cloud security in light of the

Cyber Safety Review Board's report on the Summer 2023 Microsoft Exchange Online Intrusion.

Before we get into the substance of the report,

can you talk about the growth and role that cloud services have come to play in our digital ecosystem over the last 10 years?

And why cloud security is so critical?

...