cloud content security vs innovation 2012_0821

16
securing cloud content: are your policies restricting innovation ? brian gleeson august 21, 2012

Upload: brian-gleeson

Post on 09-Jun-2015

141 views

Category:

Technology


1 download

DESCRIPTION

Many CIOs grapple with enabling workers with cloud content collaboration solutions that help them innovate and get their jobs done, while also making sure that these solutions are secure. Our objective is to help workers and corporations not only survive but thrive in this precarious landscape. Toward that goal we’ll discuss the current landscape, how we see the challenge and provide a framework that we hope will help you in your endeavors moving forward

TRANSCRIPT

Page 1: Cloud content security vs innovation 2012_0821

securing cloud content: are your policies restricting innovation?

brian gleeson august 21, 2012

Page 2: Cloud content security vs innovation 2012_0821

agenda

no, really

•  the landscape •  the real challenge

•  framework for moving forward

Page 3: Cloud content security vs innovation 2012_0821

the landscape

•  myriad cloud services •  byod mixed reviews •  how consumerized can IT get?

•  no simple answers for security

Page 4: Cloud content security vs innovation 2012_0821

cloud security == oxymoron?

Dropbox Admits Spam Was Due to Security Breach

Zappos customer data accessed In security breach

Researchers uncover AWS security vulnerabilities

Sony’s Security Breach May Be The Biggest Personal Data Heist in History

Another  black  eye  for  Amazon?  Hackers  may  have  used  AWS  in  crippling  Sony  attack  

Foursquare  security  breach  exposes  875,000  check-­‐ins  

Page 5: Cloud content security vs innovation 2012_0821

one approach to the problem

•  bans Dropbox, iCloud and other ‘public cloud content services’

•  ’we found a tremendous lack of awareness as to what constitutes risk. we’re trying to make people aware’ ibm cio jeannette horan

•  employees now use IBM-hosted MyMobileHub

Page 6: Cloud content security vs innovation 2012_0821

the reality – workers will circumvent IT solutions

•  50% of workers say they have better technology at home

source: forrester, ‘enablement not control,’ june 2012  

Page 7: Cloud content security vs innovation 2012_0821

an example from the real world

•  operate in 30+ countries •  content is core asset •  IT solution (FTP) viewed

as complex and incomplete

•  employees had already embraced the cloud

Page 8: Cloud content security vs innovation 2012_0821

getting the balance right

security productivity

Page 9: Cloud content security vs innovation 2012_0821

what do workers want

•  usability

•  flexibility

•  security

•  holistic solutions

Page 10: Cloud content security vs innovation 2012_0821

security basics for cloud content collaboration

•  centrally managed policies

•  encryption device to data center

•  mobile device controls

•  regulatory standards compliance

•  auditing, reporting, e-discovery

Page 11: Cloud content security vs innovation 2012_0821

getting the balance right: are we asking the right questions?

security productivity business needs IT solutions

Page 12: Cloud content security vs innovation 2012_0821

content collaboration is evolving in real time

•  mobile, enterprise social, sharepoint evolution •  email is dead, long live email! •  consolidation? •  no one size fits all… •  case in point – Procter and Gamble

Page 13: Cloud content security vs innovation 2012_0821

framework for secure cloud content sharing

•  what belongs in cloud? •  what’s at risk? •  responsible behavior

educate

•  start simply •  audit user activity •  establish policies •  plan for change

audit & manage empower

•  enable workers •  delightful user experience •  fits users’ workflows •  enhance productivity •  culture of trust

Page 14: Cloud content security vs innovation 2012_0821

a success story

•  international ad agency

•  empowered workers to work smarter with clients

•  secure, online file-sharing for campaigns, commercials

•  simplified collaboration with enterprise class security

Page 15: Cloud content security vs innovation 2012_0821

summary

•  what content belongs in the cloud?

•  what does the business need?

•  can vendors be accountable on security?

•  are you educating users on security risks?

•  what is your policy on auditing content sharing?

Page 16: Cloud content security vs innovation 2012_0821

thank you!

Contact [email protected]