Next gen tech means next gen threats

Data and workloads no longer live within the confines of a corporate firewall. As cloud adoption accelerates, traditional cloud security models simply don’t translate as well to reality on the ground. So now, organisations need to re-architect security if they are serious about protecting their data, their users, their supply chain and customers. If this isn’t carried out effectively, whole businesses could be at risk. Navigating cloud security seems to be at the forefront of this year’s strategy for CTOs.

Adopting a defence-in-depth strategy

In the cloud, your organisation’s ‘attack surface’  spans across networks, applications and data; and today’s wily threat actors are quick to exploit cloud misconfigurations and vulnerabilities. Despite what they claim, no single vendor provides a total cloud security solution, so take a layered approach instead, such as encryption and DLP, which integrates multiple vendors into a hybrid cloud solution.

Thanks to recent advances, behavioural analytics and machine learning can act as your eagle-eyed security guards, spotting suspicious activity and raising the alarm early. Microsegmentation then functions like strong castle walls, limiting lateral movement and minimising the impact of any security breach.

Finding the right fit

Some workloads are moving back on-premise for security, compliance, data sovereignty and cost reasons, yet, many still leverage SaaS (Software as a Service) for its agility.

We advise evaluating each workload separately – we can’t hinder user productivity with security, or bad actors will get around it. It’s important to maintain usability without compromising security, using tools like a secure web gateway (SWG) – a security gateway that filters internet traffic and enforces policy compliance. For instance, an organisation might bring its financial data processing back in-house for tighter security, while keeping customer service applications in SaaS for faster response times. It’s all about finding a bespoke solution, fit for your unique needs.

Closing the cloud visibility gap

The cloud inherently lacks the full control and visibility of on-premise data centres, as many organisations have found to their cost already. To monitor and close these gaps, we should prioritise the implementation of robust cloud security posture management. Costs can also balloon from Shadow IT due to unforeseen expenses, such as data egress fees and unexpected charges for exceeding usage limits, let alone costs from potential data breaches that come from Shadow IT services which lack the same level of security protocols and compliance checks as approved solutions.

Therefore, getting comprehensive visibility into all cloud usage and assets is crucial. After all, how will we ever gain control over our cloud environments if we can’t see what’s happening within it?

Data sovereignty and regulatory compliance

Another factor that is crucial to consider, is ensuring that compliance needs around data location are not ignored. As data ownership shifts to cloud vendors, organisations lose direct control over their data at rest, in transit, and in use. Just like you can’t sneak souvenirs past customs, you need to follow the rules for the data movement. At Axians UK, we blend solutions with a focus on user experience for smooth cloud transitions.

Securing access, data configurations, and workloads across cloud environments means that enterprises can confidently navigate cloud security complexities. We must remember, however, that you can’t know everything about every single threat vector, but you should put everything you possibly can in place to prevent them. Stay ahead of next generation threats that arise from new technologies, whilst keeping ahead of the curve.

Chris Gilmour 
CTO at Axians UK