Features

Features

• CASB, CSPM, CWPP emerge as future of cloud security

  Complexity has introduced new needs and challenges when securing cloud environments. Find out how CASB, CSPM and CWPP tools have evolved to meet the changing cloud landscape.  Continue Reading

• Security for SaaS applications starts with collaboration

  Following established best practices helps enterprises facilitate collaboration and communication through SaaS applications while simultaneously ensuing secure SaaS use.  Continue Reading

• An inside look at the CCSP cloud security cert

  Get insights into the Certified Cloud Security Professional cert, cloud infrastructure and platform benefits and risks, and more from the author of a CCSP exam guide.  Continue Reading

• Hands-on guide to S3 bucket penetration testing

  Attention AWS pen testers: The trick to understanding the indicators of AWS S3 bucket vulnerabilities is setting up an insecure bucket. Learn how in this actionable guide.  Continue Reading

• How to handle Amazon S3 bucket pen testing complexity

  Security researcher Benjamin Caudill shares details from his book, 'Hands-On AWS Penetration Testing with Kali Linux,' and advice on Amazon S3 bucket pen testing for ethical hackers.  Continue Reading

• The importance of security, data encryption for cloud

  As more companies migrate to the cloud, they need to also invest in cybersecurity for their cloud computing, such as through better encryption and authentication tools.  Continue Reading

• How to address and close the cloud security readiness gap

  Cloud security readiness remains a shortcoming for companies despite the majority using cloud services. Here are three steps they can take to close the cloud security gap.  Continue Reading

• How Azure, AWS, Google handle data destruction in the cloud

  Data destruction is a topic that has been poorly covered until recently. Regardless of which cloud service provider you use, this review of the top three CSPs' data destruction documentation should improve your due diligence.  Continue Reading

• VPC security best practices and how to implement them in AWS

  To best secure network access, AWS administrators need to create rules for network resources. Learn how to implement Amazon VPC security best practices in this book excerpt.  Continue Reading

• Overcome AWS security vulnerabilities with VPCs, IAM

  Securing network access in AWS requires the right rules to be in place. Learn more about Virtual Private Clouds and how implementing them can prevent common cloud security attacks.  Continue Reading

• CCSK cert guide author's insights into cloud security credential

  The author of a Certificate of Cloud Security Knowledge exam guide offers insights into certifications, top considerations for those pursuing the CCSK and more.  Continue Reading

• Understanding the CSA Cloud Controls Matrix and CSA CAIQ

  Uncover how the CSA Cloud Controls Matrix and CSA CAIQ can be used to assess cloud providers' controls and risk models, ensure cloud compliance and more.  Continue Reading

• Juggling a multi-cloud security strategy takes work

  Enterprise security best practices must account for changes in cloud landscapes. Learn how to overcome such challenges and bolster multi-cloud security with technology and policy.  Continue Reading

• Benefits of using Azure Security Center for security assessments

  Author Yuri Diogenes discusses how Azure Security Center helps admins achieve full cloud visibility, conduct security assessments and prevent potential breaches.  Continue Reading

• Use Azure Security Center to conduct a security posture assessment

  In this excerpt from Chapter 4 of Microsoft Azure Security Center, the authors outline how to use the software to determine and improve your enterprise's cloud security posture.  Continue Reading

• Understand CASB technology before you buy

  CASB technology offers threat protection, increased visibility and policy enforcement. Explore how these tools protect access to cloud applications, and then compare some of the top products.  Continue Reading

• How security teams benefit from traffic mirroring in the cloud

  Enterprises with the resources to deploy traffic mirroring are gaining security benefits. Frank Siemons explains how traffic mirroring has adapted to new and evolving cyber-risks.  Continue Reading

• Research shows cloud security vulnerabilities grow

  Recent research shows the number of cloud security incidents are growing. Here are the biggest contributors to the complicated cloud threat landscape facing modern enterprises.  Continue Reading

• What are cloud containers and how do they work?

  Containers in cloud computing have evolved from a security buzzword. Deployment of the technology is an essential element of IT infrastructure protection.  Continue Reading

• As cloud complexities increase, cybersecurity skills gap worsens

  Concerns about the lack of security expertise persist, according to respondents in a new CSA survey of IT and security professionals on complexities within native cloud, hybrid and multi-cloud environments.  Continue Reading

• The risks of multi-cloud security compared to single cloud

  Single-cloud architecture poses some challenges, which has led to a new trend in adopting multi-cloud designs. Discover whether multi-cloud is right for your enterprise.  Continue Reading

• Top cloud security risks that keep experts up at night

  Hackers are after your assets in the cloud. Here's how they get in and what you can do to plug security holes, starting with minimizing the risks created through human error.  Continue Reading

• Words to go: Multi-cloud security strategy

  For many enterprises, implementing multi-cloud security is complicated. Here's a breakdown of the must-know multi-cloud terms for organizations setting up this type of deployment.  Continue Reading

• Container security tools pump up the platform

  Startups are developing technologies that fill in some of the security gaps, including better controls for container orchestration.  Continue Reading

• AWS S3 bucket security falls short at high-profile companies

  Everyone is putting their data in the cloud, from IT staff to department heads. With functionality galore, basic security measures too often go unchecked.  Continue Reading

• New cloud threats as attackers embrace the power of cloud

  Safeguarding your critical data is getting harder as threat actors embrace the advantages -- and missteps -- of cloud. Here's what to watch out for in 2018.  Continue Reading

• The Cloud Security Ecosystem

  In this excerpt from chapter seven of The Cloud Security Ecosystem, authors Ryan Ko and Kim-Kwang Raymond Choo discuss protecting digital identity in the cloud.  Continue Reading

• Is data-centric security worth the implementation challenge?

  Data breaches and incoming regulations are heightening the need for a data-centric security model, say security leaders. Here’s how to gain control and stop unauthorized use of your data.  Continue Reading

• Cloud visibility: Manage DevOps and other vulnerabilities

  Help is on the way. Companies moving to public cloud infrastructure try out a new crop of cloud visibility tools to monitor configurations and security policy.  Continue Reading

• CASBs: Why the market and uses are growing

  Cloud access security brokers offer CISOs a way to set policy and gain better understanding of cloud services and data in use across the enterprise. Do these tools fill the gaps?  Continue Reading

• How the Flip Feng Shui technique undermines cloud security

  The Flip Feng Shui attack against hypervisors could have both short and long-term effects on enterprises. Expert Ed Moyle explains how the exploit works and how to deal with it.  Continue Reading

• Q&A;: Western Union's unique strategy to secure cloud services

  Mike Bartholomy of Western Union explains how the financial services company has embraced employee use of cloud services and how his team approves and secures these applications.  Continue Reading

• Legacy security tools challenge companies facing cloud migration

  Traditional security tools designed for data centers don't work well in cloud environments. New approaches are needed, according to security executives. Here's how to survive the chasm.  Continue Reading

• Buying cloud access security brokers with confidence

  IT security professionals buying cloud access security broker services must focus on what the technology now offers and determine precisely what their company IT architecture requires. Here's how.  Continue Reading

• Cloud DLP: Can gateways rise to the challenge?

  Cloud access security brokers are quickly emerging as the technology of choice for enterprises seeking to implement data loss prevention controls in the cloud.  Continue Reading

• Readers' top picks for cloud security products

  What companies and cloud security products do organizations consider when they see to reduce their cloud vulnerabilities?  Continue Reading

• Securing data and ensuring compliance in cloud-based services

  Cloud-based services are already widely in use in enterprises, but are your corporate data and systems both secure and compliant with industry regulations?  Continue Reading

• CSA Guide to Cloud Computing

  In this excerpt of CSA Guide to Cloud Computing, authors Rai Samani, Brian Honan and Jim Reavis review cloud security threats based on research by the CSA's Top Threats Working Group.  Continue Reading

• The ups and downs of cloud compliance

  You can't outsource security responsibility. Knowing where your data is and how it's protected, is the challenge.  Continue Reading

• How to best employ cloud-based security services

  The cloud-based security services market is booming, as enterprises adopt email, Web security, and identity and access management SaaS. How can CISOs best combine cloud-based security controls with on-premises security programs? This Beyond the Page...  Continue Reading

• Five ways CIOs tackle hybrid cloud security

  The traditional moat model is disappearing as companies embrace hybrid cloud strategies from microsegmentation to perimeter controls.  Continue Reading

• Collaboration with Cloud Computing

  In this excerpt of Collaboration with Cloud Computing, author Ric Messier outlines how enterprises can evaluate risk management in the cloud.  Continue Reading

• Are FedRAMP security controls enough?

  Cloud service providers are working with authorized third-party auditors to meet FedRAMP security controls. The 3PAOs tell us how it’s going, so far.  Continue Reading

• Understanding open source cloud infrastructure security

  Cloud security expert Ed Moyle discusses the pros and cons of an open source cloud, as well as running an open source cloud security infrastructure.  Continue Reading

• Understanding IDaaS: The benefits and risks of Identity as a Service

  Are identities safe in the cloud? Experts say enterprises must carefully weigh the risks vs. rewards of identity management as a service.  Continue Reading

• CSA cloud metrics validate perceptions on cloud computing risk

  The CSA cloud market maturity study revealed in-depth data on cloud adoption, influence and risk.  Continue Reading