David Druker - CTO, Cloud Security IBM Security North America

1. Safeguarding Your Hybrid Cloud
Through Visibility and Control
David Druker
CTO, Cloud Security
IBM Security North America
@dgdruker
#HybridCloudTour

2. #HybridCloudTour
Hybrid cloud brings security challenges...
...but it also provides new security opportunities
2

3. #HybridCloudTour
Hybrid Cloud Security Challenges
3

4. #HybridCloudTour
Cloud Specific Threats
4

5. #HybridCloudTour
5
Hybrid Cloud Security Solutions
and Opportunities
5
#HybridCloudTour

6. #HybridCloudTour
Brief Cloud Security Checklist
• IaaS
• Redundant, FedRAMP certified, US data centers
• Dark fiber private network
• Trusted computing platform
• PaaS and SaaS
• Choose providers that implement key controls, e.g. NIST, CSA STAR
• Manage identity from the enterprise
• Leverage Cloud provider security; supplement with security vendor products
• Overall Cloud Environment
• Strong access and compliance controls
• Continuous monitoring
• Include mobile security
6

7. #HybridCloudTour
Don’t let security become a dead end
for Cloud
7

8. #HybridCloudTour
Learn More
• Cloud Security Maturity Workshop
(contact David Druker dgdruker@us.ibm.com)
• Free Cloud Risk App Assessment
• CISO's Guide to Enabling a Cloud Security Strategy (IDC white paper)
• Cyber Crime: Keeping Data Safe from Security Incursion (On-demand
webinar)
8

9. #HybridCloudTour
Session Break