For CISOs

Despite the promise of the cloud to deliver safe, secure, agile, and cost-effective computing, current solutions and strategies nevertheless expose organizations to security gaps that make it difficult to make the move:

Auditable Data Visibility

Improved data agility needs to be backed up by audit-friendly mechanisms that provide detailed visibility and traceability into who, when, and where data has been touched, whether it was on-premises, in-transit, or at rest in the cloud.

Irresponsible Cloud Migration

While data might be safe within the cloud layer, migrating massive amounts of data to it carries significant transport risk, with threats ranging from bad actors to data loss.

 

Encryption and Golden Master Copy

Ensuring the integrity, veracity, and authoritativeness of vaulted data requires end-to-end encryption and both retention and WORM locks to prevent tampering, along with detailed audit trails that capture policy changes made even by administrators.

In-Cloud Data Verification

Reliable cloud-based data integrity verification requires mature methodologies, with integrity checks running in a tightly controlled environment separate from live/active data to ensure that verification services remain uncompromised and authoritative.

While companies accelerate to the cloud to drive greater agility and flexibility, CISOs need to manage the risks that accompany these new capabilities. Any effective cloud strategy needs to have data security and responsible management integrated to enable companies to light up their data with assurance.