© Mapbox, © OpenStreetMap

Speaker

Karl Ots

Karl Ots

Head of Cloud Security at EPAM | Author and Inventor

New York City, New York, United States

Actions

Karl Ots is a cloud security leader, author, and educator with over 15 years of experience in the technology industry. He serves as the Head of Cloud Security at EPAM Systems, where he leads global teams in delivering secure, scalable, and compliant cloud solutions for Fortune 500 clients across diverse industries.

Karl is the author of the book Securing Microsoft Azure OpenAI (Wiley) and a LinkedIn Learning instructor, where he teaches advanced topics in cloud security architecture. He is a recognized Microsoft Regional Director and Security MVP, and holds certifications including CISSP, CCSP, and SABSA SCF.

A frequent speaker at global conferences, Karl is passionate about helping organizations build secure cloud-native systems and communicate complex security designs effectively across technical and executive audiences.

Badges

Area of Expertise

  • Information & Communications Technology

Topics

  • Cloud Security
  • AI and Cybersecurity

Objection! AI Security Mistakes on Trial with Kubeflow and Confidential Computing

Enter the courtroom of cloud-native justice, where the most pressing AI security mistakes are put on trial. From exposed sensitive data to flawed model training and insecure pipelines, the prosecution will lay bare the vulnerabilities threatening AI deployments. But don’t worry—Kubeflow, confidential computing, and other powerful open source projects will take the stand to defend your AI infrastructure. Learn how these technologies work together to enforce robust security guardrails, protect sensitive data, ensure compliance, and mitigate the risks that come with AI operations. This session blends technical depth with courtroom drama to help you identify, understand, and address common AI security mistakes, so you can build secure, scalable AI pipelines with confidence. Join us for a verdict that ensures the protection of your AI workloads!

Top 10 Azure security tips from 10 years of securing Azure applications

In the last 10 years, Azure has become one of the most popular cloud platforms for businesses and organizations of all sizes. As the platform has evolved, so has the threat landscape. To understand the present cloud security landscape and predict the future, let's take a trip down the memory lane!

In this session, we will discuss how Azure's security controls have evolved over time. Throughout the session, I will share best practices for securing your Azure infrastructure, applications, and data, so that you can build an architecture that stands the test of time.

Securing Azure Open AI apps in the Enterprise

With the last year bringing us real hands-on experience with Azure OpenAI, and the announcement of OpenAI’s ChatGPT Enterprise. it's time to look at how to properly secure Open AI services in Azure.

In this session, we explore the core security controls for securing usage of OpenAI’s services in an enterprise environment. We cover what controls are available, which are missing, what is their effective coverage, and how to implement them.

Walking out of the session, you will be able to identify and implement security controls that make sense for your organization. You will also be able to identify what is missing and how to mitigate those gaps.

Top pitfalls of Microsoft Azure security and how to avoid them

Did you know that contrary to popular belief, the most common cloud security threats are not outside attacks, but rather misconfigurations? To fully secure public cloud platforms, we need to understand them deeply. This requires both upskilling existing information security office with cloud expertise and shifting the way security responsibilities are spread across the organization.

I have assessed the security hundreds of solutions built on the Microsoft Azure cloud and found that there are some key security pitfalls that are common across all industry verticals and company sizes. In this session, I will share what these security pitfalls are, why do they matter and how to mitigate them.

Lessons learned from enterprise cloud security programs

In the on-premises world, cybersecurity risks were limited to your organization’s network perimeter. In the era of cloud computing, both the impact and likelihood of potential risks are significantly higher. With the corresponding rise of DevOps methodology, security is now the responsibility of everyone who are part of the application development lifecycle, not just security specialists. In this session, I will present my findings on methods and processes to build the cloud security framework that make sense for both your business and your developers. The session is based on real-life experiences from implementing cloud security programs in some of the largest enterprises in the world.

NDC Manchester 2025 - AI & Security Sessionize Event Upcoming

December 2025 Manchester, United Kingdom

BSidesNYC 0x05 Sessionize Event Upcoming

October 2025 New York City, New York, United States

DDD North 2022 Sessionize Event

December 2022 Kingston upon Hull, United Kingdom

KCDC 2022 Sessionize Event

August 2022 Kansas City, Missouri, United States

IglooConf 2022: Midsummer Sessionize Event

June 2022 Helsinki, Finland

DevSum 2022 Sessionize Event

May 2022 Stockholm, Sweden

Global Azure 2022 Sessionize Event

May 2022

Microsoft Azure + AI Conference Spring 2022 Sessionize Event

April 2022 Las Vegas, Nevada, United States

Security BSides Dublin 2022 Sessionize Event

March 2022 Dublin, Ireland

DDD 2021 Sessionize Event

November 2021 Reading, United Kingdom

Automation + DevOps Summit Sessionize Event

November 2021 Nashville, Tennessee, United States

KCDC 2021 Sessionize Event

September 2021 Kansas City, Missouri, United States

India Cloud Security Summit , 2021 Sessionize Event

August 2021

Azure Lowlands Sessionize Event

January 2021

DDD 2020 Sessionize Event

December 2020

Experts Live Switzerland 2020 Sessionize Event

September 2020 Bern, Switzerland

Microsoft Techdays 2020 Sessionize Event

March 2020 Helsinki, Finland

IglooConf 2020 Sessionize Event

January 2020 Helsinki, Finland

CloudBrew 2019 - A two-day Microsoft Azure event Sessionize Event

December 2019 Mechelen, Belgium

ITCamp 2019 Sessionize Event

June 2019 Cluj-Napoca, Romania

Techorama Belgium 2019 Sessionize Event

May 2019 Antwerpen, Belgium

IglooConf 2019 Sessionize Event

January 2019 Helsinki, Finland

Update Conference Prague 2018 Sessionize Event

November 2018 Prague, Czechia

CloudBrew 2018 - A two-day Microsoft Azure event Sessionize Event

October 2018 Mechelen, Belgium

Intelligent Cloud Conference 2018 Sessionize Event

May 2018 Copenhagen, Denmark

Azure Saturday 2018 Sessionize Event

May 2018 Munich, Germany

TechDays Finland 2018

Navigating in the sea of containers in Azure: when to choose which service and why?

March 2018 Helsinki, Finland

CloudBrew 2017 - A full-day Microsoft Azure event Sessionize Event

November 2017

TechDays Sweden 2017

Monitoring advanced Azure PaaS workloads in the enterprise - Level: 200

October 2017 Stockholm, Sweden

TechDays Netherlands 2017

Building globally scalable media solutions with Azure Media Services

October 2017 Amsterdam, The Netherlands

Karl Ots

Head of Cloud Security at EPAM | Author and Inventor

New York City, New York, United States

Actions

Please note that Sessionize is not responsible for the accuracy or validity of the data provided by speakers. If you suspect this profile to be fake or spam, please let us know.

Jump to top