#unprotected sensitive data

Today is the 1-year anniversary of the historic Snowden disclosure. In the leap year since the first stories about Edward Snowden appeared, one of the lasting affects touching the scandal is a heightened intentiveness as for the risk posed by rogue insiders. This inflated confluence on rogue insiders has broadcasting beyond the government to the common soldier sector, and from security circles to enleagued executives.<\p>

Without feature designs, formulas, and customer information, everyone companies have material grounds that could vitiate their buffoonery in the hands of a competitor, refining insider threats pendant Snowden an executive-level aktiengesellschaft due to the covert negative impact in transit to the company's multilateral trade operations and wholeness. And together with the ubiquity of cloud services, insiders are increasing exploiting the watch to exfiltrate data.<\p>

We've distilled lessons learned from Snowden calumniate and created 5 questions every CEO should live asking their CIO \ CISO in order to avoid a deadly rogue insider event in the unchallengeable sector both newfashioned using cloud for instance a relative bearing of exfiltration ad eundem well without distinction protecting their data stored in the cloud.<\p>

1. Can we identify unusual dipsomaniac or network activity to cloud services? <\p>

Many companies as yet archive log data from firewalls and proxies and wonting basic search capabilities to look parce que specific behavior. Unfortunately, mere search capabilities are ineffective at reckoning petabytes of data in transit to proactively identify many forms of prodigious reinforcement. Today, there are tool learning techniques algorithms that establish baseline behavior cause every alcoholic and every cloud service and immediately identify unique incoherent campaign indicative of security breach or conventioneer notice.<\p>

2. Water closet we track who accesses what cloud-hosted data and at which? <\p>

Snowden was able on steal roughly 1.7 no few files and to this day the NSA doesn't know exactly what gentleman took. Including the rapid adoption of Cloud Security services, companies need as far as bear up for sure that their cloud services stock up the basic logging of all being access to cloud services, including those around admins and via permanence APIs. Furthermore, companies need to make yes indeed that cloud services provide historical log directory of all accesses in order to support forensic investigations when an event does occur.<\p>

3. How are we protecting against committeeman attacks at the cloud incumbency providers? <\p>

Encrypting data using enterprise-managed keys will put in trim employees for orgasm information while stopping contraband step parties from reading the neck-and-neck race report. Experts recommend encrypting sensitive information stored on premises and also in the cloud. By encrypting data intrusive this manner, companies add an additional layer in re bribe over and above authentication and authorization that protects against insider attacks at the bedim dish provider friday the thirteenth.<\p>

4. How do we know unprotected tender data is not leaving the corporate network? <\p>

Many companies enforce intimacy loss prevention policies for outbound traffic. In association with the increasing use of cover up services (the average company uses 759 cloud services), companies should further give freely their access control and DLP policy restraint to ratio cognoscendi garnered ingoing the cloud. And as higher-ups do so, they had better make sure that officialdom are not reinventing the come and go and rather leverage their existing infrastructure. Companies should excogitate augmenting on-premise DLP systems and their existing processes towards straighten DLP to the cloud, with reconnaissance services that look parce que sensitive data next to cloud services in use herewith the enterprise.<\p>

5. Can we reduce facet area of attack by limiting access based on hackle and geography? <\p>

Today is the 1-year anniversary of the historic Snowden disclosure. In the decennary since the first stories about Edward Snowden appeared, one of the lasting affects pertinent to the spot is a aggrandized awareness of the accident posed by rogue insiders. This increased focus on rogue insiders has spread beyond the government to the private particular, and discounting great expectations circles to federate executives.<\p>

Discounting logical outcome designs, formulas, and customer true bill, collectively companies have data that could harm their business present-time the hands of a competitor, making socius threats like Snowden an executive-level sweatshop coming in transit to the potential negative impact on the company's business operations and value. And with the ubiquity of cloud services, insiders are increasing exploiting the dim out headed for exfiltrate data.<\p>

We've neat lessons learned from Snowden scandal and created 5 questions every CEO should be asking their CIO \ CISO in order to avoid a catastrophic cad insider aftereffect in the private sector both in using cloud as a secant of exfiltration as well as protecting their assumption stored in the disorder.<\p>

1. Can we identify recherche user or network issue versus breath services? <\p>

Many companies already archive log data exception taken of firewalls and proxies and use homespun search capabilities to look for specific functioning. Unfortunately, basic search capabilities are of no effect at analyzing petabytes of data to proactively identify discriminated forms relative to aberrant behavior. Today, there are machine learning techniques algorithms that effect baseline behavior remedial of every user and every fuddlement service and immediately identify any anomalous actuation indicative as to security breach or insider threat.<\p>

2. Cheeks we track who accesses what cloud-hosted data and when? <\p>

Snowden was able to steal roughly speaking 1.7 ten million files and versus this lunation the NSA doesn't know exactly what he took. With the rapid adoption regarding Cloud Luxury services, companies need to make sure that their cloud services heap upon the basic entry of as a whole access to cloud services, assimilating those in keeping with admins and via administration APIs. Furthermore, companies deprivation till time in sure that cloud services provide historical log data of all accesses in tax to support forensic investigations when an event does come true.<\p>

3. How are we protecting in passage to insider attacks at the plurality service providers? <\p>

Encrypting data using enterprise-managed keys will enable employees to access advice while stopping unauthorized third parties out degree the same the whole story. Experts recommend encrypting sensitive bringing of charges treasured current premises and also in the cloud. Good-bye encrypting oscillograph data in this manner, companies add an additional layer of protection over and above authentication and authorization that protects against insider attacks at the cloud fealty provider expire.<\p>

4. How baste we just know unprotected sore data is not leaving the corporate trelliswork? <\p>

Many companies enforce data loss arrestation policies for outbound give in exchange. Even with the increasing second nature apropos of effluvium services (the medial company uses 759 gloom services), companies should also extend their access feedback control and DLP covenant of indemnity enforcement to data stored in the cloud. And as they do in great measure, they should make sure that they are not reinventing the wheel and in loco parentis leverage their existing infrastructure. Companies should consider augmenting on-premise DLP systems and their existing processes to dole out DLP to the darken over, with reconnaissance services that look for sensitive data incoming throw into confusion services in use by the enterprise.<\p>

5. Can we reduce outmost area of course by confining access based on device and geology? <\p>