cloud content security vs innovation 2012_0821

securing cloud content: are your policies restricting innovation?

brian gleeson august 21, 2012

agenda

no, really

•  the landscape •  the real challenge

•  framework for moving forward

the landscape

•  myriad cloud services •  byod mixed reviews •  how consumerized can IT get?

•  no simple answers for security

cloud security == oxymoron?

Dropbox Admits Spam Was Due to Security Breach

Zappos customer data accessed In security breach

Researchers uncover AWS security vulnerabilities

Sony’s Security Breach May Be The Biggest Personal Data Heist in History

Another  black  eye  for  Amazon?  Hackers  may  have  used  AWS  in  crippling  Sony  attack  

Foursquare  security  breach  exposes  875,000  check-­‐ins  

one approach to the problem

•  bans Dropbox, iCloud and other ‘public cloud content services’

•  ’we found a tremendous lack of awareness as to what constitutes risk. we’re trying to make people aware’ ibm cio jeannette horan

•  employees now use IBM-hosted MyMobileHub

the reality – workers will circumvent IT solutions

•  50% of workers say they have better technology at home

source: forrester, ‘enablement not control,’ june 2012  

an example from the real world

•  operate in 30+ countries •  content is core asset •  IT solution (FTP) viewed

as complex and incomplete

•  employees had already embraced the cloud

getting the balance right

security productivity

what do workers want

•  usability

•  flexibility

•  security

•  holistic solutions

security basics for cloud content collaboration

•  centrally managed policies

•  encryption device to data center

•  mobile device controls

•  regulatory standards compliance

•  auditing, reporting, e-discovery

getting the balance right: are we asking the right questions?

security productivity business needs IT solutions

content collaboration is evolving in real time

•  mobile, enterprise social, sharepoint evolution •  email is dead, long live email! •  consolidation? •  no one size fits all… •  case in point – Procter and Gamble

framework for secure cloud content sharing

•  what belongs in cloud? •  what’s at risk? •  responsible behavior

educate

•  start simply •  audit user activity •  establish policies •  plan for change

audit & manage empower

•  enable workers •  delightful user experience •  fits users’ workflows •  enhance productivity •  culture of trust

a success story

•  international ad agency

•  empowered workers to work smarter with clients

•  secure, online file-sharing for campaigns, commercials

•  simplified collaboration with enterprise class security

summary

•  what content belongs in the cloud?

•  what does the business need?

•  can vendors be accountable on security?

•  are you educating users on security risks?

•  what is your policy on auditing content sharing?

thank you!

Contact brian.gleeson@yousendit.com