Five Steps To Secure Cloud Computing

HPE has identified the five key capabilities necessary for securing a hybrid cloud environment:

Data-centric security: Protecting data is the core of security and compliance controls. Data needs to be secured at rest, in motion and while in use. It should maintain an index with a searchable data format after it is protected and the encryption should be multi-layered.

Dynamic infrastructure hardening: Just like on-premises machines, the cloud infrastructure needs to be updated and hardened to reduce attack surfaces. Traffic between virtual machines needs to be secured, and core operating systems should be patched and hardened to prevent hypervisor breakouts.

Monitor, detect and respond to breaches and security events: Businesses need complete visibility into all parts of their hybrid cloud environments. There must be a method to collect and analyze log data from multiple sources into a single location and format. The data must be meaningful and actionable—providing specific steps and actions for a coordinated response from security teams.

Continuous regulatory compliance: Compliance is critical. A cloud solution must adhere to a consistent set of auditable controls across the entire hybrid cloud environment. The model should be policy-based and include integrated tools that automatically check for compliance drift against common regulatory standards.

Shared access management: The hybrid cloud solution must also have a common method for shared identity and access management across all components. It should include a portal for administrative functions, as well as an integration point with the established enterprise directory services. Ideally, it would also offer a federated single sign on (SSO) for multiple cloud environments.

Author: Chris Steffen

Source

Author
Recent Posts

Brian

Managing Partner at meshIP, LLC

Brian Byrne is the founder and Managing Partner of Dallas based meshIP, a technology services firm offering cloud computing strategies and services. He is an accomplished executive with senior management experience in all facets of the technology, telecom, cloud computing, and SaaS industries. He has proven success in developing, financing and executing strategic plans as well as launching new ventures. His background includes a record of significant achievement in international business development and his credentials include a MBA in Marketing and Management Strategy from the J.L. Kellogg Graduate School of Management at Northwestern University, a MS from the School of Computer Science at DePaul University, and a BBA in Finance from the University of Notre Dame.

He is also the inventor of the patented meshDETECT, Secure Prison Cell Phone Solutions.

LinkedIn Profile