The Cloud BYOC Problem for the Enterprise

[spacer]

 The BYOC & BYOD Enterprise Problem

[spacer]

Cloud Services are growing at an exponential rate for both business and personal use.

Cloud providers today allow private people (maybe your employees) to create powerful computing environments in the cloud by creating their own machines.  The BYOC (bring your own cloud) Users may choose any flavor of Windows, Unix and other VM machines.  Such computers are created in a virtual environment and take minutes to create.

When such machines are available, users may copy data from their own home or work machine to the cloud machine by Copy and Paste or just Drag and Drop.  Such actions are mostly done utilizing the HTTPS protocol but often we see Cloud providers using Secure RDP.

This creates a huge problem for organizations as there is no Visibility to such protocol.  Employees can copy/backup their entire C drive to the Cloud in few minutes.   These transmissions are a significant risk of data loss to the organization since most ‘content aware’ DLP systems do not have visibility to such breaches.

How is an organization able to monitor such activities and Block valuable Data from being copied?

 

How can you confirm that all data, which should be encrypted, actually is prior to leaving the network or cloud?

 

GTB’s Data Loss Prevention Solutions are the answer

GTB Data Protection platform scans all content uploaded to cloud applications such as Salesforce, Box, Google, Dropbox and more.  Based on easy, customizable policies; GTB will use enforcement actions such as block, quarantine, alert and more along with notifying & educating an end-user or administrator.

GTB provides visibility and controls to:

  • Distinguish between personal and enterprise applications (sanctioned vs unsanctioned)
  • Protect sensitive data in the cloud
  • Control and govern cloud usage
  • Aid in insider threat detection and response

[spacer]

An important point:

Most “DLP” solutions are NOT DLP, as the major key to successful DLP deployment is to reduce the number of incidents to a minimum by setting up the system to report only pertinent violations.  Many DLP systems fail in accurately detecting incidents and instead report thousands of irrelevant events.  Most vendors will refer to this phase as “Tuning”; for GTB, tuning equates to “FAILURE”.

Visibility: Accurately, discover sensitive data; detect and address broken business process, or insider threats including sensitive data breach attempts.

Protection: Automate data protection, breach prevention and incident response both on and off the network; for example, find and quarantine sensitive data within files exposed on user workstations, FileShares and cloud storage.

Notification: Alert and educate users on violations to raise awareness and educate the end user about cybersecurity and corporate policies.

Education: Start target cyber-security training; e.g., identify end-users violating policies and train them.

  • Employees and organizations have knowledge and control of the information leaving the organization, where it is being sent, and where it is being preserved.
  • Ability to allow user classification to give them influence in how the data they produce is controlled, which increases protection and end-user adoption.
  • Control your data across your entire domain in one Central Management Dashboard with Universal policies.
  • Many levels of control together with the ability to warn end-users of possible non-compliant – risky activities, protecting from malicious insiders and human error.
  • Full data discovery collection detects sensitive data anywhere it is stored, and provides strong classification, watermarking, and other controls.
  • Delivers full technical controls on who can copy what data, to what devices, what can be printed, and/or watermarked.
  • Integrate with GRC workflows.
  • Reduce the risk of fines and non-compliance.
  • Protect intellectual property and corporate assets.
  • Ensure compliance within industry, regulatory, and corporate policy.
  • Ability to enforce boundaries and control what types of sensitive information can flow where.
  • Control data flow to third parties and between business units.