Welcome!

Cloud Security Authors: Yeshim Deniz, Zakia Bouachraoui, Liz McMillan, Elizabeth White, Ravi Rajamiyer

Related Topics: @CloudExpo, Mobile IoT, Cloud Security

@CloudExpo: Article

Meeting Today’s Data Security Imperative | @CloudExpo #Cloud

Encryption strategies are critical for securing data today but must be deployed in a thorough, holistic way

Organizations are experiencing a new emphasis when it comes to cybersecurity. They are moving from securing the perimeter to securing the data within it, which is the result of the proliferation of connected devices in organizations today: smartphones, tablets and the IoT. Organizations used to focus their efforts on keeping attackers outside the perimeter, because just a few years ago, the network perimeter was much more static and limited. Today, the perimeter is everywhere - and constantly moving.

Furthermore, hackers have repeatedly demonstrated their ability to breach network perimeter security. And as the workplace and the devices and applications employees use have become increasingly distributed, the focus has changed to protecting the data and not just the perimeter.

Consequently, IT security teams are setting their sites on pervasive data security. Encryption strategies are critical for securing data today but must be deployed in a thorough, holistic way. Otherwise, data may be protected in one place but not in other multiple locations. That's a false sense of security that can lead to data disaster.

Encrypting for Data Security
As organizations design a holistic data protection initiative, they must look at not just financial data or payment information but also personally identifiable information (PII) that has become so valuable to criminals. This data demands the utmost protection, because while someone stealing your credit card is a problem, you can always cancel your card - you can't cancel your identity or change your date of birth.

In the quest to protect data, organizations are finding that encryption is a good partner. Every organization needs an encryption strategy, starting with the protection of an organization's most confidential or sensitive information. When encrypting this data, it is compulsory that key management is simple and easy. This way, no matter where your data is located, it's encrypted and it's secure.

However, a huge question for the majority of organizations is: Where exactly IS your data? Organizations fall into the trap of protecting data only when it exists in a particular area, but that same set of data exists in potentially many other places. If it's not protected everywhere, it is then vulnerable. Organizations need to understand, discover and know where all their sensitive data is located and ensure data is encrypted at rest, in use and in transit.

Data protection was once an item on a list to check off and then forget about. But in light of the most recent hacks on high-profile organizations, data protection is a boardroom discussion - and we've seen what happens to senior executives who haven't properly protected their sensitive data. In addition, customers are becoming more concerned about the safety of their data.

At this point, enterprises understand that they need encryption - yet some still hesitate. Why? Because encryption can get challenging - but it doesn't have to. Here are five top pervasive encryption techniques to help maximize data protection while minimizing the challenges:

  1. First things first: Start off on the right foot by creating a comprehensive encryption strategy that allows you to understand what data you are encrypting, how you are managing your keys and the underlying policy controls for user access.
  2. Protect what you treasure: Encrypt any data that would be considered sensitive.  And ensure you're encrypting it in all phases of its life cycle - at rest, in use and in transit.
  3. Separation of powers: Create policy controls that enforce separation of duties between network personnel and security professionals. Separating out the security components and the network management components or the application user components is critical to ensuring that only the people who need to access the different systems are able to access them.
  4. Deploy an HSM: Because the goal is to protect sensitive data, use a hardware security module. It has the highest level of assurance to keep your most important keys inside a secure hardware boundary.
  5. Remain vigilant: Vulnerabilities will evolve, so stay safe by continually monitoring your people, processes and security posture. You need to look at your people processes as well to make sure you have some kind of checks and balances in your technology strategy and continue to evolve it to see vulnerabilities.

More Stories By Peter Galvin

Peter Galvin is a product and marketing strategist for Thales e-Security with over two decades of experience in the high tech industry. He has worked for Oracle, Inktomi, Openwave, Proofpoint and SOASTA.

Comments (0)

Share your thoughts on this story.

Add your comment
You must be signed in to add a comment. Sign-in | Register

In accordance with our Comment Policy, we encourage comments that are on topic, relevant and to-the-point. We will remove comments that include profanity, personal attacks, racial slurs, threats of violence, or other inappropriate material that violates our Terms and Conditions, and will block users who make repeated violations. We ask all readers to expect diversity of opinion and to treat one another with dignity and respect.


IoT & Smart Cities Stories
Machine learning has taken residence at our cities' cores and now we can finally have "smart cities." Cities are a collection of buildings made to provide the structure and safety necessary for people to function, create and survive. Buildings are a pool of ever-changing performance data from large automated systems such as heating and cooling to the people that live and work within them. Through machine learning, buildings can optimize performance, reduce costs, and improve occupant comfort by ...
René Bostic is the Technical VP of the IBM Cloud Unit in North America. Enjoying her career with IBM during the modern millennial technological era, she is an expert in cloud computing, DevOps and emerging cloud technologies such as Blockchain. Her strengths and core competencies include a proven record of accomplishments in consensus building at all levels to assess, plan, and implement enterprise and cloud computing solutions. René is a member of the Society of Women Engineers (SWE) and a m...
Poor data quality and analytics drive down business value. In fact, Gartner estimated that the average financial impact of poor data quality on organizations is $9.7 million per year. But bad data is much more than a cost center. By eroding trust in information, analytics and the business decisions based on these, it is a serious impediment to digital transformation.
DXWorldEXPO LLC announced today that Ed Featherston has been named the "Tech Chair" of "FinTechEXPO - New York Blockchain Event" of CloudEXPO's 10-Year Anniversary Event which will take place on November 12-13, 2018 in New York City. CloudEXPO | DXWorldEXPO New York will present keynotes, general sessions, and more than 20 blockchain sessions by leading FinTech experts.
Apps and devices shouldn't stop working when there's limited or no network connectivity. Learn how to bring data stored in a cloud database to the edge of the network (and back again) whenever an Internet connection is available. In his session at 17th Cloud Expo, Ben Perlmutter, a Sales Engineer with IBM Cloudant, demonstrated techniques for replicating cloud databases with devices in order to build offline-first mobile or Internet of Things (IoT) apps that can provide a better, faster user e...
Bill Schmarzo, Tech Chair of "Big Data | Analytics" of upcoming CloudEXPO | DXWorldEXPO New York (November 12-13, 2018, New York City) today announced the outline and schedule of the track. "The track has been designed in experience/degree order," said Schmarzo. "So, that folks who attend the entire track can leave the conference with some of the skills necessary to get their work done when they get back to their offices. It actually ties back to some work that I'm doing at the University of ...
Charles Araujo is an industry analyst, internationally recognized authority on the Digital Enterprise and author of The Quantum Age of IT: Why Everything You Know About IT is About to Change. As Principal Analyst with Intellyx, he writes, speaks and advises organizations on how to navigate through this time of disruption. He is also the founder of The Institute for Digital Transformation and a sought after keynote speaker. He has been a regular contributor to both InformationWeek and CIO Insight...
Rodrigo Coutinho is part of OutSystems' founders' team and currently the Head of Product Design. He provides a cross-functional role where he supports Product Management in defining the positioning and direction of the Agile Platform, while at the same time promoting model-based development and new techniques to deliver applications in the cloud.
Andrew Keys is Co-Founder of ConsenSys Enterprise. He comes to ConsenSys Enterprise with capital markets, technology and entrepreneurial experience. Previously, he worked for UBS investment bank in equities analysis. Later, he was responsible for the creation and distribution of life settlement products to hedge funds and investment banks. After, he co-founded a revenue cycle management company where he learned about Bitcoin and eventually Ethereal. Andrew's role at ConsenSys Enterprise is a mul...
In his session at 21st Cloud Expo, Raju Shreewastava, founder of Big Data Trunk, provided a fun and simple way to introduce Machine Leaning to anyone and everyone. He solved a machine learning problem and demonstrated an easy way to be able to do machine learning without even coding. Raju Shreewastava is the founder of Big Data Trunk (www.BigDataTrunk.com), a Big Data Training and consulting firm with offices in the United States. He previously led the data warehouse/business intelligence and Bi...