Is securing your cloud security different from securing other forms of IT? You would think so from the alphabet soup of acronyms around the subject.
Organizations are exploiting cloud because they help to accelerate business changes without the need for capital expenditure or lengthy procurement delays to obtain hardware. However, the dynamic nature of cloud services creates new security challenges that need a dynamic approach to governance and security controls.
In addition, the responsibilities for security and compliance are shared between the CSP (Cloud Service Providers) and the cloud customer and it is up to the customer to ensure that they use the cloud in a secure and compliant manner. On top of that each cloud service provides its own proprietary tools for security. KuppingerCole Leadership Compass on CNAPP will help you to make sense of this.
How can an organization be sure that it is using cloud services securely and in a way that meet its compliance obligations and its appetite for risk? This presentation will provide an overview of the risks and how these tools can help.
After attending this presentation, you will be able to:
- Describe the major risks related to the way organizations use cloud services.
- Explain why cloud services need dynamic rather than static controls.
- List the different kinds of tools (and their acronyms) that claim to manage these risks.
- Describe the main functionality that a CNAPP solution should provide.
