{"id":7600,"date":"2019-08-05T09:30:23","date_gmt":"2019-08-05T08:30:23","guid":{"rendered":"https:\/\/citysecuritymagazine.com\/?p=7600"},"modified":"2019-08-05T09:35:46","modified_gmt":"2019-08-05T08:35:46","slug":"four-steps-to-cloud-security-for-business","status":"publish","type":"post","link":"https:\/\/citysecuritymagazine.com\/cyber-security\/four-steps-to-cloud-security-for-business\/","title":{"rendered":"Four steps to cloud security for business"},"content":{"rendered":"

Four steps to cloud security for business<\/strong><\/h1>\n

Business cloud services can provide access to data and applications at all times from any location, bringing great commercial benefits.<\/p>\n

But does this mean cloud security considerations can lag behind?<\/p>\n

Three of the most profitable and valuable companies in the world \u2013 Amazon, Microsoft and Google \u2013 all operate in the cloud sector. For the largest of these, Amazon, their business cloud services platform \u2013 AWS (Amazon Web Services) \u2013 delivers their greatest growth and now accounts for over half of Amazon\u2019s revenue. Similar stories pervade at Microsoft, with the growth of Microsoft Azure and Office 365, with over 31 million paying subscribers and growing exponentially.<\/p>\n

On average we will find in excess of 1,000 cloud applications in use across a medium- sized business, with many employees using at least 30 applications per month, often sharing the same password across multiple applications and users.<\/p>\n

The work place is no longer a place<\/h4>\n

People work differently today, expecting to work from any place, at any time and on any device, sharing information and collaborating in real time and accessing and sharing sensitive data in the process in order to get the job done.<\/p>\n

Remote access to data \u2013 yesterday and today<\/h4>\n

In the past, access to data was controlled mostly by IT and stored inside a protected perimeter. Remote access to the data was permission-based and almost always through a VPN. Threats were focused on the network and endpoint. With a defined perimeter, IT was able to tightly control access to data and assess the risk.<\/p>\n

Fast forward to today\u2026 with over 50% of access to business applications happening off network, remote access is expected and visibility into these applications is limited. The focus in many businesses is on speed to market, collaboration, sharing and business enablement, with security considerations often lagging behind.<\/p>\n

Security \u2013 a shared responsibility<\/h4>\n

While many of the major cloud service providers, such as Amazon, Microsoft and Google, throw huge amounts of resources and money on cloud security \u2013 it is the customer that is responsible for securing their data in the cloud environment, for ensuring compliance of that data and ultimately, it\u2019s the customer who is liable for the financial and brand damage caused by any data security breaches. The cloud service provider protects the infrastructure; how you protect access to and control of the data inside the platform is your concern.<\/p>\n

Responsibility throughout the organisation<\/h4>\n

Cloud security isn\u2019t just an IT Problem, it concerns all levels of the C-Suite, from the CEO who is looking to drive innovation, the CFO (Chief Financial Officer) who is trying to control costs and utilise resources efficiently, the DPO (Data Protection Officer) or General Counsel who is concerned about compliance and regulations such as GDPR, PCI or the FCA, as well as understanding what Intellectual Property the company needs to protect, through to the CMO (Chief Marketing Officer) who is concerned about protecting the brand, the CIO (Chief Information Officer) who is trying deliver a platform to keep pace with innovation and finally, the CISO (Chief Information Security Officer) who needs to remain compliant.<\/p>\n

Four steps to cloud security<\/h4>\n

To understand what you are really up against when it comes to cloud security, it is important to undertake a Cloud Risk Assessment for a 360-degree view of your business\u2019s cloud presence across both your sanctioned and unsanctioned applications.<\/p>\n

This will enable you to identify threats to your data security, make sure you\u2019re compliant with industry regulations and identify compromised accounts and malware infections.<\/p>\n

You can incorporate this Risk Assessment in a four-step process, closely aligned to Gartner\u2019s 4 pillars of Cloud Security, to become cloud confident:<\/p>\n