Opinion

Opinion

• Shared responsibility model transparency boosts cloud security

  The shared responsibility model delineates where company and CSP security responsibilities start and end. This is critical not only for compliance, but also the big security picture.  Continue Reading

• Manage and secure cloud sprawl in multi-cloud systems in 2 steps

  As enterprise cloud adoption increases, so too does the risk of cloud sprawl -- and, with it, cloud security threats. Learn how to beat cloud sprawl in two steps.  Continue Reading

• AWS IAM Access Analyzer should help keep S3 buckets and objects from being public

  Due to the complexity around AWS permissions, it’s easy to accidentally misconfigure buckets and leave them open to the public.  Continue Reading

• The top cloud security challenges are 'people problems'

  Cloud security begins at home. Considering the human factor in cybersecurity is step one when it comes to addressing how to keep critical assets safe in cloud.  Continue Reading

• Cloud security threats need a two-pronged approach

  You'll need to burn the security 'candle' at both ends to keep cloud safe from both nation-state hackers and vulnerabilities caused by human error.  Continue Reading

• Idaptive officially launches their “Next-Gen Access Cloud” IDaaS platform

  Next-Gen Access Cloud has a new architecture, and Idaptive will continue to expand its machine learning capabilities.  Continue Reading

• Shadow IT risks still primary driver of CASB use

  Visibility in cloud environments has proved challenging for information security executives tasked with protecting sensitive data and other assets.  Continue Reading

• 2017 forecast: Cloud-based systems headed your way

  There's no turning back: Consumers and enterprises see the possibilities of cloud-based voice recognition systems; so does Amazon.  Continue Reading

• Ownership of cloud risks gets lost in many cloud computing scenarios

  CISOs ensure that cloud services comply with IT security and risk management policies. But who has executive oversight of cloud-based technology and data?  Continue Reading

• Companies make the migration to cloud, security remains on premises

  While the effectiveness of traditional security controls depends on the cloud model, many security vendors still need to add cloud delivery to their tools.  Continue Reading

• Information security metrics: What to collect in the cloud

  Threat-related metrics that CISOs find useful often differ from what the C-suite wants to know. Here's how to communicate risk -- and return -- on cloud security investments.  Continue Reading

• Cloud deployments signal shift in CISO's role

  CISOs have more influence in enterprise cloud adoption, from the procurement of cloud services to controls and policy enforcement in layered environments.  Continue Reading

• What are cloud access security brokers, and how do they fit into end user computing?

  CASBs are another tool to help keep data safe in the cloud and mobile era.  Continue Reading

• Cloud API security: How to interface with DevOps

  Security professionals need to get acquainted with cloud API security options available to development and operation teams regardless of the services they use.  Continue Reading

• Cloud security automation: Are we up to the task?

  Orchestration tools and APIs can help enterprises implement threat detection and response functionality in the cloud. But it requires crossing another divide: DevOps and security.  Continue Reading

• Cloud security policy brings risk out of the shadows

  To put it bluntly, migration to the cloud is happening -- so deal with the data classification and information security decisions upfront.  Continue Reading

• Finding the right balance in hybrid cloud security issues

  The growing complexity of hybrid cloud security issues has many CIOs working to update their controls, particularly with cloud resources, which offer less visibility.  Continue Reading