How do you address data security in the Cloud? specifically, how confident are you that your privacy data is properly protected?

Question

Answer

Its protected decently in that we have done much to exercise existing security configuration options. New vulnerabilities and Facebook I’m not so sure. Internal threats at the cloud provider, as seen with the Capital One / AWS event, leave even aggressively secured environments vulnerable to those with the keys. To ensure a company keeps running, some people, not everyone, needs to be trusted with critical access. Even a few doctors break from their code of ethics. If that company shuts down, then my data no longer has a steward and can be sitting on some server anywhere on Earth. Most of that data is benign but sometimes, sometimes, it’s my old Blockbuster rental list, which I would not be able to explain away.

Answer

Casb and dlp and lots of SIEM rules..

Answer

I'm confident because we isolate user's data as much as we can

Answer

This is a good practice.

Answer

Encryption and controlling access

Answer

Encryption, access control, and DLP

How do you address data security in the Cloud? specifically, how confident are you that your privacy data is properly protected?

Content you might like

What is your organization's primary development platform?

If you use an air-gapped backup solution, would you say there are drawbacks?

What are your suggestions for tools that integrate Apple devices into the enterprise Single Sign On (SSO)?

Has anyone identified a good management tool that can provide insights to the backend configuration (Cloud) of multiple EDR tools and optimize the solution across multiple providers (like Trend, Microsoft Defender, Crowdstrike)?