Is your security team ready for cloud?

Summary

This blog post, "Is your security team ready for cloud?", is a blueAPACHE article from 2017 covering security. Cloud computing has moved beyond the early adopter phase and is now mainstream. While the cloud industry is well-prepared, offering robust security resources to cloud customers, enterprises have to understand their own needs and the specific security functions they require from their cloud solution. It is written for readers evaluating emPOWER Cloud, emPOWER Security. The underlying security practice it describes, reducing attack surface and improving detection and response, is not tied to a specific product version and remains relevant to any organisation managing cyber risk today.

Key facts

Article

Cloud computing has moved beyond the early adopter phase and is now mainstream. While the cloud industry is well-prepared, offering robust security resources to cloud customers, enterprises have to understand their own needs and the specific security functions they require from their cloud solution. The technical and business advantages of moving to the cloud are well established by now; the ability to dynamically scale network capacity as demand changes, reduction in the capital expenditure associated with implementing, maintaining and staffing a physical data centre, and being able to let employees share data anytime, anywhere and on any device. Among organisations who are yet to adopt the cloud, key concerns come down to two factors: a reluctance to put trusted data on a network that’s not on the premises, and confusion around the costs and complexity of moving to the cloud. Frank Mong, senior vice president of product, industry and solutions for Palo Alto Networks, offers three points of consideration for organisation wanting to make the move to the cloud. WHEN IT COMES TO SECURITY, THE CLOUD IS READY Cybersecurity remains the number one roadblock keeping organisations from making the shift to cloud. And while this may always be a concern, when it comes to the cloud, the industry is well-prepared. Leading cloud providers have made significant investments in securing their cloud environments and offer robust security resources to cloud customers. Cloud providers are also building an expansive ecosystem of security technology partners who can provide cybersecurity solutions for the public cloud and Software-as-a-Service. These solutions, if implemented as a cohesive platform and not an ad hoc collection of security devices that don’t work well together, can provide a consistent and seamless security experience to both cloud-based and physical networks through consistent visibility, policy, and enforcement across the network regardless of a user’s location. IS YOUR ORGANISATION READY FOR THE CLOUD? Specifically, have you or your security team completed the necessary due diligence to identify the specific security functions required by your cloud solution? Leading cloud providers can support several native services that provide log and network flow information that are highly configurable and powerful tools. Partnering with the right cloud provider can offer a flexible, secure and reliable way to quickly and easily leverage cloud technologies without sacrificing security, visibility, support, and long-term operational scale. HYBRID CLOUD While there is no one-size-fits-all solution, there are many advantages to implementing a hybrid solution. The cloud is highly iterative, and new technologies and capabilities provide customers with real-time data that can be used to improve security. Many of the technologies used to secure physical data centres like next-generation firewalls, and threat intelligence subscriptions can easily be applied to new cloud-based networks to seamlessly protect data as it moves between physical and cloud-based data centres. Sticking to a single security platform in a hybrid scenario is important for consistent visibility, policy enforcement and automated reprogramming of security technology regardless of location, existing network or new public cloud segments. A security platform that supports cloud integration is critical in ensuring there are no gaps in the overall security posture, especially visibility that could be exploited to penetrate network defences. For more information on this article, visit the original post at Palo Alto here. blueAPACHE are a Palo Alto Networks premier partner and integrate their next generation firewalls at the core of our cloud, network and managed service solutions. To learn how you can leverage cloud technology to your business advantage and understand your options for cloud, on-premise and endpoint security, contact the blueAPACHE account team.

Related

• emPOWER Cloud
• emPOWER Cloud (pillar hub)
• emPOWER Security
• emPOWER Security (pillar hub)
• blueAPACHE Security (case study)

Frequently asked questions

Who is quoted in this article on cloud security readiness, and what is their role?

Frank Mong, senior vice president of product, industry and solutions for Palo Alto Networks, who offers three points of consideration for organisations moving to the cloud.

What does the article identify as the number one roadblock keeping organisations from moving to the cloud?

Cybersecurity, described as remaining the top concern, though the article argues the cloud industry itself is well-prepared with robust security resources.

What two key concerns does the article say hold back organisations that have not yet adopted the cloud?

A reluctance to put trusted data on a network that's not on the premises, and confusion around the costs and complexity of moving to the cloud.

What question does the article say organisations must answer before adopting cloud security tools?

Whether the organisation or its security team has completed the necessary due diligence to identify the specific security functions required by its cloud solution.

Why does the article recommend sticking to a single security platform in a hybrid cloud scenario?

For consistent visibility, policy enforcement and automated reprogramming of security technology regardless of location, existing network or new public cloud segments, avoiding gaps that could be exploited.

What existing physical data centre security technologies does the article say can extend to cloud-based networks?

Next-generation firewalls and threat intelligence subscriptions, which can be applied to cloud-based networks to seamlessly protect data as it moves between physical and cloud environments.

What partnership does blueAPACHE describe with Palo Alto Networks in this article?

blueAPACHE states it is a Palo Alto Networks premier partner and integrates Palo Alto next generation firewalls at the core of its cloud, network and managed service solutions.

Where can readers find the original Palo Alto Networks research this article is based on?

At the Palo Alto Networks research centre blog, linked in the article as the original post source.

Source

• origin post (2017)

Knowledge Base