Bitglass Webinar - A Primer on CASBs and Cloud Security

3. Ovum | TMT intelligence | informa3 Copyright © Informa PLC Agenda 1. What is a Cloud Access Security Broker (CASB)? 2. What Drove the Development of CASB? 3. The Net Result 4. Enter CASB 5. Beyond Visibility – “CASB 2.0” 6. Technical Approaches 7. What Happens Next?

12. Ovum | TMT intelligence | informa12 Copyright © Informa PLC The Net Result Corporate IT lack visibility into what apps are in use by employees Security and compliance issues Urgent need to restore visibility and control to corporate IT

17. Ovum | TMT intelligence | informa17 Copyright © Informa PLC Beyond Visibility – “CASB 2.0” CONTROL ACTIONS • Read-only • No forwarding • No deletion • No printing • No downloading • No copying • Impose encryption

20. Ovum | TMT intelligence | informa20 Copyright © Informa PLC Poll Question 2 • Poll Question 2 ○ Where are you in your CASB journey? ■ Never heard about them before ■ Investigating vendors ■ Actively looking for the right vendor ■ Already purchased

22. Unmanaged DevicesManaged Devices Managed Apps: Zero-Day Control for Any App Major SaaS Long-tail SaaS Internal Apps → Threat Protection Data Protection VisibilityIdentity Zero-Day CoreTM ● Contextual access control ● DLP w/ adv. remediation ● Field and file encryption ● Known & Zero-day malware protection ● Account hijack protection ● Integrated Single Sign-On (SSO) ● Step-up multi-factor auth ● Session management ● UEBA ● Policy-based remediation Proxy + API Agentless ProxyAgent/Agentless Proxy 22

23. 23 Unmanaged Apps: Zero-Day Shadow IT Protection Agent/DNS Discover Shadow IT and Risks Secure access to unmanaged apps ● Route traffic via agent or DNS setting on devices ● Automated Zero-Day identification of upload paths ○ Machine-learning tech inspects all upload traffic ○ Data-paths with natural language payloads identified ● Enforce DLP policy on data paths across all users ● No signatures required, works for all apps - Facebook, Linkedin, Dropbox... Zero-Day upload DLP

24. Over 900 physicians; leading Bay Area non-profit Challenges ■ Inadequate native O365 security ■ PHI leakage from unmanaged devices ■ First-Gen CASB and AirWatch failed to deploy Solution ■ Distinguish between managed and unmanaged devices ■ Limit PHI access from risky unmanaged assets ■ Real-time DLP prevents data leakage on download ■ Readily deployable to all mobile devices, managed and unmanaged

25. Over 20,000 students and 3,000 faculty members Challenges ■ Cloud deployment met with security concerns around intellectual property, research, and health data ■ Unmanaged device access controls ■ Compliance requirements including HIPAA and FERPA Solution ■ Granular DLP policies to identify and secure PHI ■ Regular scans for zero-day malware in the cloud ■ Distinguish between managed and unmanaged devices ■ Technical safeguards for HIPAA compliance at Feinberg School of Medicine

26. Agentless deployment, any device Real-time data protection, anywhere Zero-day security, any app or workload Only Bitglass 26 Global enterprise success via sustained innovation and scale

Bitglass Webinar - A Primer on CASBs and Cloud Security

Empfohlen

Empfohlen

Weitere ähnliche Inhalte

Was ist angesagt?

Was ist angesagt? (20)

Ähnlich wie Bitglass Webinar - A Primer on CASBs and Cloud Security

Ähnlich wie Bitglass Webinar - A Primer on CASBs and Cloud Security (20)

Mehr von Bitglass

Mehr von Bitglass (13)

Kürzlich hochgeladen

Kürzlich hochgeladen (20)

Bitglass Webinar - A Primer on CASBs and Cloud Security