Observations on CSA Summit at RSA – Part 1
Blog Article Published: 03/15/2017
By Katie Lewin, Federal Director, Cloud Security Alliance CSA Summit at RSA was a day-long session on Securing the Converged Cloud organized around presentations and panels from leading vendors such as Centrify, Veracode, Microsoft, and Netskope, as well as a talk on “Effective Cybersecurity” by Ret. Gen. Keith Alexander and a fireside chat with Robert Herjavec of “Shark Tank” fame. (Session recordings from the CSA Summit are now available.) Several themes emerged over the course of the day of presentations, panels and fireside chats:
- The cloud is still the most secure environment for data and acceptance of cloud as a secure environment for data storage is at the tipping point of acceptance by most IT users. In one survey cited, half of the respondents said that the cloud was more secure than on-premises.
- Identity continues to be important – the message of many of the speakers is that there are too many passwords and too many special privileges.
- Emphasis should be placed on data protection rather than device protection. Security is moving to Modern Data Controls – from device and identity security to data protection and controls. Rights management and data classification are the key indicators in data control.
- Security must move to a process that authenticates first and then connects as opposed to the current emphasis on connect and then authenticate.
- Establish Identity assurance across the IT environment;
- Consolidate identities through single sign-on and then layer on multi-factor identification;
- Limit lateral movement – move to automated provisioning – identify who is still on staff and what they can access;
- Move to approval workflow for access requests; and
- Audit privilege access.
- Technology is rapidly changing, and data available is increasing exponentially; but this information becomes outdated in 2 -3 year horizon.
- Advanced technology is playing a more important role in our lives – for example IBM’s Watson is now working on formulating chemo for brain cancer patients.
- Moving to the cloud is good – resulting in better security and cost savings especially for small and mid-size businesses.
Share this content on your favorite social network today!