Session Summary/Abstract

The security and audit landscape is rapidly evolving, driven by the emergence of powerful quantum threats, the need for cryptographic control over data-in-use, and the complexity of regulatory compliance. This afternoon session will provide ISACA Toronto members with an essential technical and strategic overview of three critical areas reshaping modern cloud security. We will cover the imminent risks posed by Cryptographically Relevant Quantum Computers (CRQCs) and the steps organizations must take to transition to Post-quantum Cryptography (PQC). Next, we will explore Confidential Computing, a set of technologies that provide a hardware based trusted execution environment (TEE), ensuring data remains safe and encrypted even while it is actively being processed ("in use"), protecting it from curious neighbors and malicious cloud administrators. Finally, we will discuss leveraging automation to enable Continuous Controls Monitoring (CCM) for faster cloud adoption, simplifying evidence collection, and aligning internal controls with industry frameworks like NIST 800-53.

Aaron Sutton

Technical Solutions Lead - Financial Services, Office of the CISO

 Aaron works with large financial institutions in North America, Europe, and the UK to ensure they are able to safely and securely use Google Cloud for their critical workloads. Aaron has significant experience in the implementation and configuration of Google Cloud security products and leads the development of security artifacts to meet stringent customer requirements. Aaron has been at Google for 7 years, beginning in the Professional Services Organization, specializing in security. Prior to Google, Aaron worked as a data scientist in Cyber Risk at Deloitte.

Aaron also holds a PhD in experimental condensed matter physics from the University of Toronto, in Toronto, Ontario, and a Bachelor of Science degree in Engineering Physics from Queen’s University in Kingston, Ontario.

Edwin Chiu

Strategic Cloud Engineer

Edwin Chiu is a Strategic Cloud Engineer at Google, where he helps enterprises navigate the complexities of digital transformation and cloud architecture. Based in Toronto, Edwin brings over two decades of experience in technology, engineering, and platform architecture to his role, specializing in building resilient, scalable systems for global industries

CPE:4.0 Hrs.

Refund & Cancellation Policy in effect