When designing a scalable modern cybersecurity architecture, what are some key data protection/privacy considerations to account for — especially in a multi-cloud environment?

Security Strategy & Roadmap Data Privacy & Protection

2.8k views3 Comments

Sort by:

Director of Information Security in Finance (non-banking)a year ago

When it comes to big environments, my focus would be on Governance, huge installations, distributes over multiple data centres and more than one cloud provider tend to get lost in complexity.
Get a clear inventory of systems and data, define clear accountabilities and responsibilities and a structure to prove compliance top down.

SVP, Chief Information Security Officera year ago

Can you talk a little bit more about what you mean by multi-cloud environment? Multi-SaaS for workforce enablement? Multi-IaaS/PaaS for development and delivery of your own SaaS? Both? Something else?

HEAD IT in Consumer Goodsa year ago

data classification and sesnsibility is the main to look after.

Content you might like

Do you feel like your board of directors spends enough time discussing cyber, generally speaking?

Yes66%

No29%

I'm not sure4%

View Results

Does your company offer international customers payment methods that are specific to their country or region? (i.e., SEPA, iDeal, Sofort, etc.)

Yes73%

No26%

Has anyone gone through the UK's Cybersecurity Essentials Plus certification and if so, would you be willing to share with me your experience and what was involved? I just want to make sure I understand what is involved and what is in scope.

We’re evaluating a new ERP. Our company, PROENERGY is a vertically integrated power partner (gas plant design/build, O&M, manufacturing including our PE6000 turbine, and 2.6 GW ERCOT operations).

Considering: SAP Public Cloud, Oracle Fusion Cloud, Microsoft Dynamics, IFS, and Infor Construction Cloud.

Key needs: manufacturing, complex structure with built-in consolidation/reporting, long-range planning, procurement/inventory, and core accounting.

We use Microsoft Dynamics today for CRM/Field Service. Biggest concerns: implementation partners and support resources.

Would love your thoughts.

What are the toughest cultural or operational challenges that come with implementing a zero-trust policy, in your experience? How did you tackle those issues when they came up?