Securing the new normal

Enterprises have a hybrid cloud strategy that mixes the resources and services of multiple private and public clouds in multiple different cloud configurations and patterns. In such scenarios, a business service needs to run across cloud and non-cloud(on-prem) as well as across more than one cloud (mult-cloud). The clouds could be public and private; multiple public clouds (different vendors); public cloud(s) and SaaS service(s). Welcome to the new normal.

To devise a security strategy for the hybrid/multi-cloud scenario, we need to consider a model to consistently able to define and manage for all the components and services the necessary levels of security and compliance. This is a model that's workload Workload centric and covers the four key areas of security

• Identity and access management (for users, services and network)
• Data Security
• Security Visibility
• Policy, Governance, Risk and Compliances

We have developed some great method and capabilities to address these areas. We will be talking about this and more at IBM Think 2019. If you are here in San Francisco for the event, don't miss these sessions - https://ibm.biz/secure-cloud

We will be also showcasing some of these scenarios and capabilities at our demo ped. As the architect, I'm excited to showcase IBM Security Advisor.

It provides you a single pane of glass for security posture and has a good set of standard based APIs that you can leverage to integrate your partner and custom tools. It also has some cool features developed with IBM research that provides insights to detect threats to your cloud environment. Security Advisor provides insights into advanced threats like suspicious inbound or outbound communication with your kubernetes deployments as well as detect suspicious network or user activity.

Join me or watch live Think to discuss more about these and share your pain points on the new normal.