登录查看更多内容

What are the best ways to ensure your CASB solution is effective?

由人工智能和领英社区提供技术支持

A cloud access security broker (CASB) is a software tool that helps you monitor and control the use of cloud services by your organization. A CASB can help you prevent data breaches, enforce policies, detect threats, and respond to incidents. But how can you make sure your CASB solution is effective and aligned with your business needs? Here are some best practices to follow.

此文章中的业界达人

由社区从 5 条内容中精选。了解更多

Maria Teigeiro, CISSP

Security Magician - Security to Accelerate Business

1 Assess your cloud environment

Before you choose a CASB solution, you need to understand your current cloud environment and the risks associated with it. You can use a cloud discovery tool to identify the cloud services that your users are accessing, the data that they are storing or sharing, and the compliance requirements that apply to them. You can also perform a gap analysis to determine the security capabilities that you need from a CASB solution, such as encryption, firewall, data loss prevention, or anomaly detection.

添加您的观点

Maria Teigeiro, CISSP

Security Magician - Security to Accelerate Business
举报内容
Unfortunately, cloud discovery tools are not very effective means of identifying the cloud services users are accessing. In order to effectively capture them, one needs a client installed on endpoints to capture all the different cloud services which are accessed. Cloud discovery tools will only discover the known cloud services, but miss shadow IT environments. IN looking at a CASB solution, you must keep in mind that an inline CASB solution must be able to decrypt traffic to have the visibility required to perform any sort of security policy enforcement.

已翻译

赞
Azam Marzook

CTO | Cloud | Security | Digital Transformation | Mentor
举报内容
CASB Solutions provide variety of features and they vary between different providers. Hence the capability and most effective way of integrating the CASB solution into your environment is key. Looking at the firewalls, identity directories, applications and the cloud providers used need to be taken into consideration. CASB solutions operate in one or more of the following modes: 1. Forward proxy 2. Reserve Proxy 3. API based Looking for solutions that could cover the entire IT estate is crucial in the research phase.

已翻译

赞

2 Choose the right deployment model

There are different ways to deploy a CASB solution, depending on your network architecture and your cloud service providers. You can opt for an API-based model, where the CASB integrates with the cloud service APIs and monitors the data and activities in real time. You can also use a proxy-based model, where the CASB acts as an intermediary between the users and the cloud services and enforces policies and security measures. Or you can use a hybrid model, where you combine both approaches to cover different scenarios and use cases.

添加您的观点

Maria Teigeiro, CISSP

Security Magician - Security to Accelerate Business
举报内容
Using a CASB that offers API-based inspection (Out of band - OOB inspection) is critical to address the historical repository of data. Using CASB that sits in line is critical to capture data in motion. Using a CASB tool that only offers one or the other is one hand clapping. Both are required to get full functionality. Moreover, it is critical that both are offered byt he same tool for policy consistency.

已翻译

赞

3 Define and implement policies

A CASB solution is only as effective as the policies that you define and implement. You need to establish clear and consistent policies for the access, usage, and protection of your cloud data and services. You can use the CASB to enforce these policies across different devices, users, and locations. For example, you can restrict access to sensitive data based on roles, locations, or devices. You can also apply encryption, masking, or tokenization to protect data at rest or in transit. You can also monitor and audit the compliance of your cloud services with relevant regulations and standards.

添加您的观点

Maria Teigeiro, CISSP

Security Magician - Security to Accelerate Business
举报内容
The most challenging part of implementing CASD policies is not the technical tooling; it is the operational complexities of handling the violations which are encountered: what happens when a HR user moves data with an employee SSN to an external cloud platform? What happens when that same user does it for the 3rd time? Because of these operationally involved nuances, it is critical that the CASB solution in question support workflow automation. Security admins are NOT the right people to determine if an action is critical to a job function. Only that user's manager can make that call in a reliable manner. This is the type of thing workflow automation provides.

已翻译

赞

4 Monitor and analyze activities

A CASB solution can help you gain visibility and insight into your cloud environment and the activities that take place within it. You can use the CASB to monitor and analyze the traffic, events, and behaviors of your users and cloud services. You can also use the CASB to detect and alert you of any anomalies, threats, or violations that may indicate a potential breach or compromise. You can also use the CASB to generate reports and dashboards that can help you measure and improve your cloud security posture and performance.

添加您的观点

Maria Teigeiro, CISSP

Security Magician - Security to Accelerate Business
举报内容
A complete CASB soluyion will not only monitor cloud acitivity by users, but APIs as well. Experience has shown that hundreds or even thousands of APIs have access to corporate resources (things like 1-800-glowers having access to corporate calendars). Although this access may have been granted by users for innocuous reasons, they are vulnerabilities that need monitoring.

已翻译

赞

5 Respond and remediate incidents

A CASB solution can also help you respond and remediate incidents that may affect your cloud environment. You can use the CASB to isolate, contain, or block any malicious or unauthorized activities or access. You can also use the CASB to investigate and trace the root cause and impact of an incident. You can also use the CASB to restore or recover any data or services that may have been affected or lost. You can also use the CASB to review and update your policies and procedures to prevent or mitigate future incidents.

添加您的观点

6 Review and update your CASB solution

A CASB solution is not a one-time investment, but a continuous process that requires regular review and update. You need to keep track of the changes and trends in your cloud environment, your business needs, and your security objectives. You also need to evaluate the effectiveness and efficiency of your CASB solution and the policies and practices that you have implemented. You also need to update your CASB solution and its features and functions to match the evolving needs and challenges of your cloud security.

添加您的观点

7 Here’s what else to consider

This is a space to share examples, stories, or insights that don’t fit into any of the previous sections. What else would you like to add?

添加您的观点

Computer Engineering

+ 关注

给文章评分

我们借助人工智能创建了此文章。您认为这篇文章怎么样？

很棒不太好

举报此文章

查看全部

What are the best ways to ensure your CASB solution is effective?

1

2

3

4

5

6

7

1 Assess your cloud environment

2 Choose the right deployment model

3 Define and implement policies

4 Monitor and analyze activities

5 Respond and remediate incidents

6 Review and update your CASB solution

7 Here’s what else to consider

Computer Engineering

给文章评分

感谢您的反馈

更多Computer Engineering相关文章

更多相关阅读内容

What are the best ways to ensure your CASB solution is effective?

1

2

3

4

5

6

7

1 Assess your cloud environment

2 Choose the right deployment model

3 Define and implement policies

4 Monitor and analyze activities

5 Respond and remediate incidents

6 Review and update your CASB solution

7 Here’s what else to consider

Computer Engineering

给文章评分

感谢您的反馈

查看其他技能