登录查看更多内容

What are the benefits and risks of using a public cloud for security?

由人工智能和领英社区提供技术支持

Many IT operations managers are considering moving some or all of their security functions to the public cloud. The public cloud offers several advantages over traditional on-premise solutions, such as scalability, flexibility, cost-effectiveness, and access to the latest technologies. However, the public cloud also poses some challenges and risks that need to be addressed before making the transition. In this article, we will explore some of the benefits and risks of using a public cloud for security, and how to mitigate them with best practices.

此文章中的业界达人

由社区从 2 条内容中精选。了解更多

Somak Banik

Associate Director - Cloud and Infrastructure Architecture | Gartner Peer Community Ambassador | Speaker | Thought…
Frederic Tillet

Manager/DSI de transition - Conseil in/out sourcing

1 Benefits of public cloud security

One of the main benefits of using a public cloud for security is that it allows IT operations managers to leverage the expertise and resources of the cloud service providers (CSPs). CSPs have dedicated teams of security professionals who monitor, update, and patch their systems regularly, ensuring compliance with industry standards and regulations. They also offer a variety of security features and tools, such as encryption, firewalls, identity and access management, threat detection and response, and backup and recovery. By using a public cloud for security, IT operations managers can reduce the burden of maintaining and securing their own infrastructure, and focus on their core business objectives.

添加您的观点

2 Risks of public cloud security

However, using a public cloud for security also comes with some risks that need to be carefully assessed and managed. One of the main risks is the loss of control and visibility over the security posture of the cloud environment. IT operations managers have to rely on the CSPs to provide adequate security measures and reports, and to notify them of any incidents or breaches. They also have to share the responsibility of securing the data and applications that they store and run on the cloud, and to comply with the relevant laws and regulations. Another risk is the potential exposure to cyberattacks and threats from malicious actors who target the public cloud. IT operations managers have to ensure that their cloud security configurations are correct and consistent, and that they have the necessary safeguards and controls to prevent unauthorized access, data leakage, or denial of service.

添加您的观点

Frederic Tillet

Manager/DSI de transition - Conseil in/out sourcing
举报内容
One of the most difficult thing I found is that the security measures taken by the cloud providers can only be assessed through their service descriptions and SLAs. However, service descriptions are not always as detailed as they could (should ?) be, except for major CSP. Therefore, companies need to formalize their security needs and translate them into targeted service level needs and a set of minimal requirements /constraints that the services they need must prove to match.

已翻译

赞

3 Best practices for public cloud security

To ensure a secure public cloud environment, IT operations managers should follow best practices that can enhance their cloud security posture and performance. This includes selecting a reputable and trustworthy CSP that meets security requirements and offers transparent policies, implementing a shared responsibility model that aligns with risk appetite and governance framework, adopting a security-by-design approach that integrates security into every stage of the cloud lifecycle, using a multi-layered defense-in-depth strategy, applying the principle of least privilege to grant only necessary access and permissions, encrypting and protecting data at rest and in transit, and monitoring security activities and events with real-time visibility. All of these steps are essential for creating a safe and secure public cloud environment.

添加您的观点

4 Here’s what else to consider

This is a space to share examples, stories, or insights that don’t fit into any of the previous sections. What else would you like to add?

添加您的观点

Somak Banik

Associate Director - Cloud and Infrastructure Architecture | Gartner Peer Community Ambassador | Speaker | Thought Leader | Passionate about DEIB Workplace | Ex-Dell | Ex- HPE | Ex - IBM
举报内容
What we need to understand is public cloud uses a shared model of security. The CSP is responsible for Security of the cloud whereas the customer is responsible for security in the Cloud. While the CSP will protect the infrastructure that runs all of the services offered in the Cloud. This infrastructure is composed of the hardware, software, networking, and facilities that run Cloud services. The shared responsibility model also extends to IT controls. Just as the responsibility to operate the IT environment is shared between CSP and its customers, so is the management, operation and verification of IT controls are shared.

已翻译

赞

IT Operations Management

+ 关注

给文章评分

我们借助人工智能创建了此文章。您认为这篇文章怎么样？

很棒不太好

举报此文章

查看全部

What are the benefits and risks of using a public cloud for security?

1

2

3

4

1 Benefits of public cloud security

2 Risks of public cloud security

3 Best practices for public cloud security

4 Here’s what else to consider

IT Operations Management

给文章评分

感谢您的反馈

更多IT Operations Management相关文章

更多相关阅读内容

What are the benefits and risks of using a public cloud for security?

1

2

3

4

1 Benefits of public cloud security

2 Risks of public cloud security

3 Best practices for public cloud security

4 Here’s what else to consider

IT Operations Management

给文章评分

感谢您的反馈

查看其他技能