"99% of cloud security failures will be the customer’s fault"? - Protect User Data from Mistakes

"99% of cloud security failures will be the customer’s fault" - Protect User Data from Mistakes

Better Software Protects Account Users from Mistakes

By Lou Senko, Q2 SVP and Chief Information Officer

The single most important thing for all our financial institution customers is secure data management.

With over 800 data breaches and 1.3 trillion records leaked last year, capable companies with capable staff and the best tools available are still falling victim. Just to add to the pile – another 105million records exposed between DoorDash and CapitalOne in the last few weeks.

This means that solution builders are leaving digital account holders data exposed and vulnerable to critical security threats. But does this make for the technology providers like Amazon Web Services (AWS) to distance themselves from the security breach blame? The more sophicicated the tools, the more complex the solutions we build on top of the providers, the more risk these highly integrated solutions have in exposing what we don’t know we don’t know, and the lesson is painful.

Leaning on "user error" as the primary reason for data breaches of its services, AWS isn't the only company fending off complaints from customers and federal departments about web governance and cybersecurity measures. Gartner researchers and analysts project that 99 percent of data breaches will be user-driven. That's not great news for any company and its customers as we are all under pressure to deliver more to end users faster. 

STAT: Through 2025, 99% of cloud security failures will be the customer’s fault. Source: (Garner, 2019)

While it might be true that user error can cause security breaches, these impact can be mitigated with the secure arcitecture design around the data. That's where we come in. Our purpose is to keep financial data secure so we can innovate faster, continually deliver new solutions and collect even more data.  We protect financial data with a multi-faceted approach to security, including our newest solution, Q2 TrustView.

Powered by ALTR, Q2 TrustView monitors, governs, and secures your financial institution's important data in real-time. This data management software uses a private blockchain technology to minimize exposure points and maximize security—no matter which bad actors are attempting to access your account holders’ data. Because, at the end of the day, it's up to us to design and implement the best data protection services we can.

The ultimate responsibility for security should not sit on the shoulders of consumers who need fast, convenient access to their myriad accounts. It’s up to us, and our FI partners, to maintain account holders’ trust and keep their data secure. The leap-a-head security shift with Q2 TrustView is with protecting the data – by not having the data.

Sean Dillane, CISSP

Vice President and Information Security Officer | Cybersecurity & Infrastructure Advisor | Business Development | Veteran

5 年

That's the key. Being quick and innovative isn't always the best way to build a robust, secure platform. It sometimes can lead to security being an afterthought. Thanks for sharing Lou Senko.

回复

要查看或添加评论,请登录

Lou Senko的更多文章

  • Scaling - Part 2 of 3

    Scaling - Part 2 of 3

    Within the past 3 years the tremendous growth of our platform as come through two avenues – adding more users through…

    3 条评论
  • Scaling - a 3 part series

    Scaling - a 3 part series

    When I joined Q2 eight years ago, we had 240 servers supporting about 1 million users. We worked through improving our…

    5 条评论
  • Asking for your insights on Credential Stuffing Attacks

    Asking for your insights on Credential Stuffing Attacks

    Fellow CIOs – I’m sharing, venting, asking for your insights. Q2 hosts about 430 financial institutions from our two…

    4 条评论

社区洞察

其他会员也浏览了