Cyber Defense eMagazine July 2021 Edition

More documents

Recommendations

Info

Getting The Cloud Right - Security and Compliance By Tim Dinsmore, Technical Director, Appurity COVID has been responsible for many things. Perhaps cloud computing doesn’t spring to the top of your list, but the pandemic has certainly spurred many organisations into adopting a cloud-first strategy. Indeed, research carried out by Forbes suggested that the majority of businesses surveyed had accelerated their move to cloud due to the pandemic. The underlying force of course is an overall shift towards remote working - this is where cloud computing can flex its muscles. But it’s not only remote working that has fueled cloud adoption - data (and its inherent security / protection) is a prime factor for organisations to move towards a cloud-first working environment. With security in mind, cloud service providers (CSPs) offer better security than when an organisation stores data ‘on-premise’. However, moving to a cloud-centric way of working still provides challenges when it comes to privacy and security. For example, consider the use and handling of data. Once upon a time, data management was the sole concern of the business. In recent years however, governments and other concerned parties have sought to gain control (thus ensuring higher levels of data security) by introducing legislation - the EU’s GDPR for example. Such levels of legislation ultimately adds new levels Cyber Defense eMagazine – July 2021 Edition 36 Copyright © 2021, Cyber Defense Magazine. All rights reserved worldwide.
of management complexity for any business that handles and stores data. And it’s not just GDPR that businesses need to comply with. There are various data management and protection requirements that exist across a number of industries. And whilst most businesses can outsource their operations to some degree or other, when it comes to compliance, then the business is left to carry the can. And this can’t be taken lightly - if your business falls foul of compliance then you face expensive penalties and even reputational damage. Visibility is key if your business aspires to a secure and compliant cloud system. Popular, well-known SaaS solutions come with inbuilt security as standard - however, they also have blind spots. Also, many SaaS offer features that are only offered at the top end of the price range, inevitably making them too expensive if you are not at enterprise level. This makes reporting a laborious affair for those tasked with putting together and auditing data from a variety of sources. Organisations are also seeing a surge in the use of personal devices along with an increase in BYOD policies. This has brought about the need to increase the resource assigned to monitoring the escalating use of out-of-scope apps. But adopting security and data solutions is a process that needs to be tempered against productivity and user experience - this should not be compromised. Employees and users at every level of the organisation need access to data regardless of their location or choice of device. A Cloud Access Security Broker (CASB) solution can optimise visibility across an organisation, by monitoring all user activity within cloud applications (company-approved and shadow apps) and enforce both internal policies and external compliance requirements. A CASB solution should additionally be adopted as part of a wider SIM/SIEM solution for the ultimate in forward-looking, secure data collection, monitoring, and consolidation. Many CASB solutions are designed with compliance in mind. They provide granular visibility and control over user interaction with cloud applications and broad audit trails of such user activity. They are perfect for centralised control, management and ease of use. Taking compliance and data protection seriously requires a proactive approach to data management. By understanding where potential data breaches exist, they can be eliminated at source. The risk of infected or malicious files making their way into the cloud, or the threat of identity theft for example, are still prevalent and must be considered as part of any data protection strategy. Identity theft, perhaps via stolen passwords, is a leading cause of data breaches. This makes it imperative for businesses to adopt stronger-than-password protection - an absolute necessity. One-time passcodes (OTPs) are used widely by businesses as an extra layer of security to password protection, but some are vulnerable to interception or phishing attempts. It is highly advisable to choose real-time generated OTPs to boost security. As businesses of all shapes and sizes increasingly move to the Cloud to manage and store all of their data and apps, the need for a robust and comprehensive solution for security and compliance in the cloud should be the foremost consideration. At the end of the day, an informed and planned proactive strategy affords those in charge all the confidence they need that compliance regulations are being met, rather than having to respond in a reactive manner with the ensuing chaos that can arise. Cloud-centered working is officially here to stay so let’s do it efficiently, securely and by the book. Cyber Defense eMagazine – July 2021 Edition 37 Copyright © 2021, Cyber Defense Magazine. All rights reserved worldwide.
Page 1 and 2: Colonial Key Business Pipeline, Les
Page 3 and 4: Ransomware, the Ultimate Cyber Thre
Page 5 and 6: @MILIEFSKY From the Publisher… Ne
Page 7 and 8: Welcome to CDM’s July 2021 Issue
Page 9 and 10: Cyber Defense eMagazine - July 2021
Page 33 and 34: Colonial Pipeline, JBS Cyber Attack
Page 35: is clear: Cyberattacks will continu
Page 39 and 40: Flipping the Cyber Script Getting A
Page 41 and 42: Trust strategies, they will prevent
Page 43 and 44: The growing threat In the last 12 m
Page 45 and 46: Common Sense Cybersecurity Steps fo
Page 47 and 48: The next big thing: addressing remo
Page 49 and 50: Applying PR tactics is a new page i
Page 51 and 52: NATO to Consider Military Response
Page 53 and 54: The number of open positions in var
Page 55 and 56: 3. Delivery - Transmission of the p
Page 57 and 58: Uncovering the Dark Side of the Col
Page 59 and 60: Energy and Utilities - You Have No
Page 61 and 62: a cyberattack that shut down approx
Page 63 and 64: Ransomware and the Cybersecurity In
Page 65 and 66: About the Author Jack Blount is Pre
Page 67 and 68: The airline industry’s poor recor
Page 69 and 70: Ransomware, the Ultimate Cyber Thre
Page 71 and 72: About the Author Yehudah Sunshine,
Page 73 and 74: A second reason for the increase in
Page 75 and 76: A Case of Identity: A New Approach
Page 77 and 78: Implementing a digital trust ecosys
Page 79 and 80: A 3-Part Plan for Getting Started w
Page 81 and 82: As threats continue to evolve, it
Page 83 and 84: 1. Endpoint and user protection Des
Page 85 and 86: The Risks of The Vulnerable Iot Dev
Page 87 and 88:
Insecure Data Transfer and Storage
Page 89 and 90:
Three Steps to Building Email Cyber
Page 91 and 92:
Plan Ahead and Avoid Disaster The H
Page 93 and 94:
NDR technology is built on three pr
Page 95 and 96:
Hardware Trojan Detection By Sylvai
Page 97 and 98:
the properties (user mode, memory a
Page 99 and 100:
About the Author My Name is Sylvain
Page 101 and 102:
outside coaches - to help them impr
Page 103 and 104:
Tips for Avoiding Online Scams Duri
Page 105 and 106:
Phishing Example 1 Phishing refers
Page 107 and 108:
About the Author Cindy Murphy is th
Page 109 and 110:
The recent Feedzai report confirms
Page 111 and 112:
Why Cyber Risk Is the Top Concern o
Page 113 and 114:
(BEC) attacks, also known as “fak
Page 115 and 116:
What Educational Institutions Need
Page 117 and 118:
Firewall Security VPN connectivity,
Page 119 and 120:
Business Continuity: Where InfoSec
Page 121 and 122:
● ● ● ● How educated are em
Page 123 and 124:
Biometrics Challenges By Milica D.
Page 125 and 126:
Epic V. Apple Trial - Impact of Big
Page 127 and 128:
About the Author Brad Ree is the Ch
Page 129 and 130:
eaches because large amounts of hig
Page 131 and 132:
• securing mobile and remote work
Page 133 and 134:
This topic has great relevance beca
Page 135 and 136:
I recommend that leaders of private
Page 137 and 138:
fail that promptly. After, say, sev
Page 139 and 140:
1. Infosecurity Europe Where: Olymp
Page 141 and 142:
leaders, and help each other advanc
Page 143 and 144:
Cyber Defense eMagazine - July 2021
Page 145 and 146:
Page 147 and 148:
Page 149 and 150:
Page 151 and 152:
Page 153 and 154:
You asked, and it’s finally here
Page 155 and 156:
9 Years in The Making… Thank You
Page 157 and 158:
show all

Cyber Defense eMagazine July 2021 Edition

Create successful ePaper yourself

Delete template?

Save as template?