Managing security in the cloud - April 2018 - Hi-Tech Security Solutions
 
classic | mobile
Follow us on:
Follow us on Facebook  Share via Twitter  Share via LinkedIn
 

Search...
Hi-Tech Security Solutions Business Directory
Residential Estate Security Handbook 2017


Managing security in the cloud
April 2018, This Week's Editor's Pick, Cyber Security, Security Services & Risk Management

According to BT’s CEO 2017 survey, cloud computing is cited as one of four critical technology trends (others include Internet of Things, mobile computing and social media) that are likely to have the most significant impact on business over the next two to three years. But, is it secure?

Alessandro Postiglioni.
Alessandro Postiglioni.

It’s also important to note that cloud computing is founded on a virtual environment, where the threats that apply to virtualisation also apply in the cloud computing space. Added to this, as cloud computing expands to cover data stored in private and public clouds, and on numerous roaming mobile devices, security is expanding out of the data centre. This leaves security decision-makers without visibility or control of cloud applications used within their environments – and new threats are inevitable.

Some of the main issues that businesses face when it comes to cloud security, include:

• Visibility – businesses can’t ‘see’ sanctioned and unsanctioned cloud applications, so they have no visibility of the cloud applications used by employees within the business (or the risk associated with them).

• Threats – whether from compromised accounts, insider threats and/or malware attempting to move data to and from the cloud, businesses are constantly at risk from cyber criminals. Below I’ve listed seven major potential threats that BT has identified.

1. Virtualisation and hypervisor based attacks.

2. Insider threat across the Cloud Service Provider (CSP) and the business.

3. Malware and data movement and remnants.

4. Phishing attacks to compromise accounts.

5. Legal and jurisdictional threats.

6. Threats to physical infrastructure.

7. Threats to shared infrastructure.

• Compliance – data-leak prevention solutions in data centres can’t protect businesses against data exfiltration by remote or bring-your-own-device (BYOD) users.

• Collaboration – businesses have no visibility of whose files are shared with or who has access to them, and they can’t apply policy around secure collaboration.

• Data security – there is no way to consistently apply encryption across sanctioned applications, or control access to sensitive data from unmanaged devices.

• Inconsistent security policy – businesses can’t consistently apply policy across all cloud applications users are collaborating with.

With the above in mind; any business considering cloud services should reflect the following questions, so as to better understand who needs to take ultimate responsibility for security at the end of the day.

• Who’s really responsible for my data? The short answer is, the client/business is. As the owner, it is their responsibility, and not the CSPs to secure their clients’ data.

• Where is my data? Although it’s in the cloud, it must also reside in a physical location. This must be discussed with the CSP as to which country/countries the data will reside in – and businesses should be aware that different countries have difference requirements and controls placed on access.

• Who has access to my data and my code? Insider attacks are a huge risk, and a potential hacker can be someone with approved access to the cloud. The client/business will need to know who will be managing their data and the types of control applied to these individuals.

• What is the current maturity and long-term viability of my chosen CSP? How long have they been in business? What’s their track record? Are they operationally effective and secure? If they go out of business, what happens to the data?

• What happens if there’s a security breach? What support will the client/business receive from the CSP?

• What is the disaster recovery/business continuity plan? The data is physically located somewhere, and all physical locations face threats, such as fire, storms, natural disasters, and loss of power, for example. It’s therefore important for a client/business to understand how their chosen CSP will respond, and what guarantee of continued services they promise.

A business’ data can actually be safer in the cloud – if cloud is used effectively and securely, and the business has solid endpoint protection measures in place. And, possibly even more safe when partnering with a reputable CSP who is able to offer a managed cloud solution through advanced self-service IaaS capability; allowing businesses to manage their own virtual infrastructure and cloud solutions – from virtual machines to the network, storage and security – from the cloud.


  Share via Twitter   Share via LinkedIn      

Further reading:

  • Measure it if you want to manage it
    August 2018, Adamastor Consulting, This Week's Editor's Pick, Security Services & Risk Management, Residential Estate (Industry)
    There is no doubt that one of the differentiators between service providers is going to be the ability to make efficient use of data. We need more data detectives to meet the challenges.
  • Using data to stay secure
    August 2018, Technews Publishing, This Week's Editor's Pick, Security Services & Risk Management, Residential Estate (Industry)
    Situational awareness beyond the boundary walls can have a significant impact on the security of an estate and the wellbeing of its residents.
  • Technology risk assessments
    August 2018, Adamastor Consulting, This Week's Editor's Pick, Security Services & Risk Management, Residential Estate (Industry)
    Rob Anderson says the role of security practitioners is to continually work on mitigating risk, both physical and technological risk.
  • What is a security risk assessment?
    August 2018, Alwinco, This Week's Editor's Pick, Security Services & Risk Management, Residential Estate (Industry)
    Alwinco's Andre Mundell takes a look at what a real security risk assessment is, what it entails and what it delivers.
  • Efficient and proactive control rooms
    August 2018, Technews Publishing, This Week's Editor's Pick, Integrated Solutions, Security Services & Risk Management, Residential Estate (Industry)
    A question many estate managers face is whether they should keep the control room onsite and manage it and the relevant staff internally, or whether they should opt for a remote monitoring service.
  • Securing Serengeti
    August 2018, Technews Publishing, This Week's Editor's Pick, CCTV, Surveillance & Remote Monitoring, Access Control & Identity Management, Perimeter Security, Alarms & Intruder Detection, Integrated Solutions, Security Services & Risk Management, Residential Estate (Industry)
    Serengeti Estate offers luxury, golf, conferencing and security, and the estate is on a new growth phase to incorporate more people and services within its 17.5 km boundary.
  • Radar comes home
    August 2018, Technews Publishing, This Week's Editor's Pick, Perimeter Security, Alarms & Intruder Detection, Integrated Solutions, Residential Estate (Industry)
    Covering up to 15 km in real time, radar-based perimeter and intrusion detection is set to change the way security operations on estates are managed and planned.
  • First line of defence
    August 2018, Technews Publishing, This Week's Editor's Pick, Perimeter Security, Alarms & Intruder Detection, Residential Estate (Industry)
    Hi-Tech Security Solutions asks what the best practices to take note of for installing and maintaining your electric fence.
  • Secure in their retirement years
    August 2018, Technews Publishing, This Week's Editor's Pick, CCTV, Surveillance & Remote Monitoring, Access Control & Identity Management, Residential Estate (Industry)
    A retirement village with a limited budget upgrades its security to protect residents from increasing criminal activities.
  • Protection via thermal detection
    August 2018, Technews Publishing, This Week's Editor's Pick, CCTV, Surveillance & Remote Monitoring, Residential Estate (Industry)
    Thermal cameras offer almost unbeatable surveillance security for estates and are the envy of any security manager.
  • Make CCTV testify for you
    August 2018, Technews Publishing, This Week's Editor's Pick, CCTV, Surveillance & Remote Monitoring, Security Services & Risk Management
    Warrant Officer Bongiwe Gqotso highlighted some key points to consider when it comes to extracting evidence from your surveillance installation at the Residential Estate Security Conference 2018.
  • Cathexis Technologies demonstrates the power of VMS at Izinga Estate
    August 2018, Cathexis Technologies, This Week's Editor's Pick, CCTV, Surveillance & Remote Monitoring, Integrated Solutions, Residential Estate (Industry)
    Cathexis installed a fully integrated video management system to support the surveillance and third-party security systems for Izinga Estate.

 
 
         
Contact:
Technews Publishing (Pty) Ltd
1st Floor, Stabilitas House
265 Kent Ave, Randburg, 2194
South Africa
Publications by Technews
Dataweek Electronics & Communications Technology
Electronic Buyers Guide (EBG)

Hi-Tech Security Solutions
Hi-Tech Security Business Directory (HSBD)

Motion Control in Southern Africa
Motion Control Buyers’ Guide (MCBG)

South African Instrumentation & Control
South African Instrumentation & Control Buyers’ Guide (IBG)
Other
Terms & conditions of use, including privacy policy
PAIA Manual
         
    Mobile | Classic

Copyright © Technews Publishing (Pty) Ltd. All rights reserved.