securing cloud content: are your policies restricting innovation?
brian gleeson august 21, 2012
agenda
no, really
• the landscape • the real challenge
• framework for moving forward
the landscape
• myriad cloud services • byod mixed reviews • how consumerized can IT get?
• no simple answers for security
cloud security == oxymoron?
Dropbox Admits Spam Was Due to Security Breach
Zappos customer data accessed In security breach
Researchers uncover AWS security vulnerabilities
Sony’s Security Breach May Be The Biggest Personal Data Heist in History
Another black eye for Amazon? Hackers may have used AWS in crippling Sony attack
Foursquare security breach exposes 875,000 check-‐ins
one approach to the problem
• bans Dropbox, iCloud and other ‘public cloud content services’
• ’we found a tremendous lack of awareness as to what constitutes risk. we’re trying to make people aware’ ibm cio jeannette horan
• employees now use IBM-hosted MyMobileHub
the reality – workers will circumvent IT solutions
• 50% of workers say they have better technology at home
source: forrester, ‘enablement not control,’ june 2012
an example from the real world
• operate in 30+ countries • content is core asset • IT solution (FTP) viewed
as complex and incomplete
• employees had already embraced the cloud
getting the balance right
security productivity
what do workers want
• usability
• flexibility
• security
• holistic solutions
security basics for cloud content collaboration
• centrally managed policies
• encryption device to data center
• mobile device controls
• regulatory standards compliance
• auditing, reporting, e-discovery
getting the balance right: are we asking the right questions?
security productivity business needs IT solutions
content collaboration is evolving in real time
• mobile, enterprise social, sharepoint evolution • email is dead, long live email! • consolidation? • no one size fits all… • case in point – Procter and Gamble
framework for secure cloud content sharing
• what belongs in cloud? • what’s at risk? • responsible behavior
educate
• start simply • audit user activity • establish policies • plan for change
audit & manage empower
• enable workers • delightful user experience • fits users’ workflows • enhance productivity • culture of trust
a success story
• international ad agency
• empowered workers to work smarter with clients
• secure, online file-sharing for campaigns, commercials
• simplified collaboration with enterprise class security
summary
• what content belongs in the cloud?
• what does the business need?
• can vendors be accountable on security?
• are you educating users on security risks?
• what is your policy on auditing content sharing?
