The State of Cloud Security
Companies in every industry are eager to leverage the benefits of the cloud and leave data center management and legacy technologies behind.
As cost optimization and increased scale drive cloud adoption from the inside, the need to stay competitive to keep pace with market changes drives it from the outside. Within the enterprise, the rush to deliver cloud solutions quickly often results in underestimated migration timelines. This is especially true for organizations making their first migrations or teams without prior cloud migration experience.
In the push to meet business deadlines, security doesn’t often get the attention it deserves. This means that production applications and sensitive data are being deployed to meet key business milestones but without the best practice security principles and methodologies to govern these solutions. This rush to the cloud is one of the factors that make companies most vulnerable to security threats.
Which practices put your cloud at risk?
Most vulnerabilities can be traced back to a lack of understanding of cloud security and a shortage of the skills necessary to implement effective security measures.
In 2017, human error, not problems inherent in cloud technology, led to some of the year’s highest-profile data breaches. Improperly configured settings in services like Amazon Simple Storage Service (S3) left millions of customer records and other sensitive data exposed. Researchers at RedLock found that 40% of organizations using cloud storage have accidentally exposed one or more of these services to the public.
40% of organizations using cloud storage have accidentally exposed one or more of these services to the public
In these instances, it’s not a failure of technology, but a lack of understanding about the importance of security and a lack of skills that put your business at risk.
In our new whitepaper, organization leaders and managers will learn the security best practices that you need to enable confidence in your cloud initiatives.
Key takeaways include:
- The importance of a security-first culture and how to build it in your organization
- What you need to know about the shared responsibility model for cloud security
- Answers to some of the most urgent questions about data security in the cloud
- A sample multi-level security architecture
- And more
AWS Security Groups: Instance Level Security
Instance security requires that you fully understand AWS security groups, along with patching responsibility, key pairs, and various tenancy options. As a precursor to this post, you should have a thorough understanding of the AWS Shared Responsibility Model before moving onto discussi...
7 Key Cybersecurity Threats to Cloud Computing
When businesses consider cloud computing, one of the major advantages often cited is the fact that it can make your business more secure. In fact, in recent years many businesses have chosen to migrate to the cloud specifically for its security benefits. So, it might surprise you to lea...
DevSecOps: How to Secure DevOps Environments
Security has been a friction point when discussing DevOps. This stems from the assumption that DevOps teams move too fast to handle security concerns. This makes sense if Information Security (InfoSec) is separate from the DevOps value stream, or if development velocity exceeds the band...
Top 10 Things Cybersecurity Professionals Need to Know
There has been an increase in data breaches over the recent years. With almost 143 million Americans who have had their data compromised in data breaches. These breaches include all sorts of sensitive data, including financial information, election controversies, social security, just t...
AWS Fundamentals: Understanding Compute, Storage, Database, Networking & Security
If you are just starting out on your journey toward mastering AWS cloud computing, then your first stop should be to understand the AWS fundamentals. This will enable you to get a solid foundation to then expand your knowledge across the entire AWS service catalog. It can be both d...
The Convergence of DevOps
IT has changed over the past 10 years with the adoption of cloud computing, continuous delivery, and significantly better telemetry tools. These technologies have spawned an entirely new container ecosystem, demonstrated the importance of strong security practices, and have been a catal...
How DevOps Increases System Security
The perception of DevOps and its role in the IT industry has changed over the last five years due to research, adoption, and experimentation. Accelerate: The Science of Lean Software and DevOps by Gene Kim, Jez Humble, and Nicole Forsgren makes data-backed predictions about how DevOps p...
New Security & Compliance Service: AWS Security Hub
This morning’s Andy Jassy keynote was followed by the announcement of over 20 new services across a spectrum of AWS categories, including those in Security and Compliance, Database, Machine Learning, and Storage. One service that jumped out to me was the AWS Security Hub, currently...
Interview: Q&A with John Visneski
Security is a top priority for organizations of all types, with research firm IDC projecting 10% spending growth to $91 billion dollars in 2018. For leadership, security is important considering the cost, regulation, and reputation at stake when breaches occur. According to a joint ...
Building Security Teams in a Competitive Talent Market: These Are The Droids You’re Looking for
John Visneski is the Head of Security and DPO at The Pokemon Company International. If you missed the webinar we organized in collaboration with John Visneski you can still watch it on demand, simply click here. The reasoning behind the popularity of this perspective is clear, if no...
Microsoft Ignites Cloud Industry With Nadella Keynote
On Monday, Microsoft kicked off its Ignite conference, an annual gathering of developers and IT professionals. Over the next week, attendees will learn about upcoming Microsoft innovations in IoT, artificial intelligence, machine learning, and cloud (all while getting some good networki...
4 Reasons You Need to Include Business Stakeholders in Cloud Training
Digital transformation is changing how organizations in every industry approach their business strategy, serving as the foundation of their technology initiatives. Chief among this includes cloud adoption, which is not just a path to IT savings, but also increasingly where companies are...