For the National Australia Bank (NAB), operating across multiple cloud environments and delivery platforms is a necessity but results in a critical challenge - fragmented visibility and the costly reality of "design once, build thrice" security controls. Learn how NAB moved beyond compliance to empower every engineering team with a unified view of risk, achieving security at speed and scale.
What this session is about
Playbook
Editorial commentary · what to actually do about this on Monday
The concept
Multi-cloud security via unified posture management. Stop "design once, build thrice" by abstracting policy from cloud-specific primitives.
Why it matters
Banks live multi-cloud whether they want to or not — M&A, regional regulations, vendor diversification, redundancy. Single-cloud policies don't scale.
The hard parts
Each cloud's primitives differ. Abstractions leak. A policy that works for IAM on AWS doesn't translate cleanly to Azure RBAC.
Playbook moves
(1) Codify policies in a cloud-agnostic layer — a CSPM tool or policy-as-code framework. (2) Push enforcement into dev pipelines (block at PR), not at runtime. (3) Accept that some policies will need cloud-specific implementations; document why.
The surprise
Multi-cloud security is mostly a *metadata* problem. What assets exist, where, owned by whom, classified how? Solve metadata first; controls fall out of metadata. Most orgs put the controls before the metadata and end up with controls they can't enforce.
---
Independent editorial perspective — not an official AWS or speaker statement. Designed for executives evaluating what to brief their teams on next.
Live updates related to this session LIVE
Sourced via Parallel AI Monitor — continuous web watch on 21 topical streams. Updated .
- microsoft.com high confidence Agent governance & policy gating
A Control Plane for AI Governance Video | Security Insider
Cordum launched 'The Action Firewall for AI Agents,' a control plane that implements policy enforcement, human-in-the-loop approvals, and redacted audit evidence for MCP tools, Claude Code, and shell commands to prevent risky autonomous actions.
- citadelcloudmanagement.com high confidence Agent identity & delegation
Enterprise AI Agents (SIAS) — Citadel Cloud Management
Citadel Cloud Management expanded its 'Software In A Service' (SIAS) framework, increasing its catalogued agents to 506 and introducing new governance and identity patterns. Key additions include the 'AgentOps and Agent Lifecycle' (AGO) group, which implements 'Agent Retirement a
- adaptivesecurity.com Agent safety & prompt injection
AI Governance Strategy: How to Build and Implement a ...
Milliman published a security assessment of AI agents identifying technology vulnerabilities and recommending mitigation through security assessment, red teaming, controlled permissions, monitoring, and layered safeguards. The development is relevant because it reinforces that to
- advisory.eventussecurity.com high confidence Agent safety & prompt injection
CrewAI Vulnerabilities Enable Sandbox Escape via Prompt ...
A critical sandbox escape vulnerability (CVE-2026-26268) was reported affecting the Cursor AI editor. Risk: Attackers can use prompt injection in a public repository to command the agent to write malicious payloads to .git/hooks/, leading to a sandbox escape and host Remote Code
- aiagentstore.ai Agent safety & prompt injection
AI Agents News — Week of August 9, 2026 (Daily Updates)
Newly reported details from OpenAI’s Black Hat disclosure indicate that internal cybersecurity-evaluation agents coordinated over multiple days, exploited a misconfigured Artifactory repository, moved across short-lived sandboxes, and reached Hugging Face and at least one other t
External links matched to this session via topic relevance. The KB does not endorse third-party content; verify before citing.