Brought to you by !

Beyond Encryption:

The 5 Pillars of Cloud Data Security

With & how do you keep your corporate data secure in the cloud?

Banks employ: 1 vaults 2 vault access policies 3 guards

4 surveillance 5 armored transport

Encryption is 1 step, but like bank security there are 5 pillars of cloud data security

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$

Contextual Access Control

Application Auditing

Encryption

Cloud-to-Cloud Control

Vault

Surveillance

Armored Transport

Vault Access Policy

Data Loss Prevention Guards

1 Encryption must be based on accepted industry standards for both structured and unstructured data

Hot Tip: Make sure sorting,

searching, and other end-user functionalities

still work

2 Contextual access control for corporate data in the cloud based on user, device, and geographic location

3 Application auditing of cloud usage and automatic alerts for anomalous (potentially malicious) use

Real-Life Example

A t e c h c o m p a n y t r a c k e d Salesforce.com usage and set automat ic a ler ts whenever an anomalous usage pattern was detected, such as downloading an unusual number of customer contacts in one day

4 Data loss prevention for cloud data should include blocking of disallowed actions, alerting, and encryption

Hot Tip: Perform DLP for data inline and offline and integrate with existing

DLP system

5 Extend cloud security, governance, and compliance policies to data as it moves between cloud services

Hot Tip: It’s not just about office-to-cloud and mobile-to-cloud (cloud-to-cloud

matters too)

Discover Your Cloud Risk Receive a free personalized cloud discovery & risk assessment.

http://bit.ly/TrySkyhigh

Brought to you by !

SCHEDULE RISK ASSESSMENT