casbs: gartner's #1 security tech for 2014 webinar
TRANSCRIPT
Cloud Access Security BrokersGartner’s #1 Security Tech for 2014
Rich CampagnaVP, Products
Bitglass
Chris HinesProduct Marketing Mgr
Bitglass
P
© 2014 Bitglass – Confidential: Do Not Distribute
Cloud Adoption - Are We There Yet?
Source: 2014 Bitglass Cloud Adoption Report - http://pages.bitglass.com/five_essentials_cloud_adoption.html
Even the experts can’t agree
No
No
No
Yes
Yes
Yes
Is the Cloud Secure?
P
The Wall Street Journal Test
Network & Application
Denial of Service
Widespread data theft
Vulnerability exploits
Intrusions
Etc.
The Wall Street Journal Test
Data
Insider misuse of data/data sharing
Credential theft/social engineering
Compliance/audit violations
Lost/stolen devices
Etc.
Shared Responsibility Model
Usage/Consumption
Data
Application
Services
Servers & Storage
Network
Data
Application
Infrastructure
Enterprise
App Vendor
CASB Points of Control
Mobile
Clo
ud
In the Cloud At Access
On the DeviceOn the Network
Attack on SaaS vendor
risks sensitive data
Download of data without
audit trail
Upload of corporate data
to Dropbox
Lost tablet containing
financial records
*The Growing Importance of Cloud Access Security Brokers (Gartner - N. MacDonald, P. Firstbrook
© 2014 Bitglass – Confidential: Do Not Distribute
IT/User Balance
Visibility & Control
- During Access
Security & Compliance
- Cloud, device,
everywhere
Flexibility
- Low admin overhead
IT needs
Mobility
- Anywhere, any device
Transparency
- Familiar user experience
Privacy
- No personal data capture
User needs
The Human Factor of Security
It’s HUMANS who:
● Misuse company data
● Lose their mobile devices
● Need to be educated on data
protection
● Are targets for phishing schemes
which steal corporate credentials
● Bring devices to the corporate
networks infected with malware
A true security solution needs to address this factor
© 2014 Bitglass – Confidential: Do Not Distribute
CASB Features
Identity
Visibility
Data Protection
Single Sign-On
Audit & Reporting
Anomaly Detection
Access Control
Data Leakage Prevention
Mobile Data Protection
Encryption (Cloud & Device)
Bitglass Total Data Protection
*Patents pending Mobile
Clo
ud
In the Cloud* At Access*
On the Device*On the Network
Public cloud flexibility,
private cloud securityComplete visibility and control
over all transactions
Discover shadow apps in-
use on the network
Protect cloud data sync’d to
devices
© 2014 Bitglass – Confidential: Do Not Distribute
Total Data ProtectionOutside the Firewall
Chris Hines
@cchines
Rich Campagna
@bitglass