Empowering Business Adoption of the Cloud through Intelligent Security Solutions and Active Defense Platforms

Transcription

1 Empowering Business Adoption of the Cloud through Intelligent Security Solutions and Active Defense Platforms Floris van den Dool, Managing Director, Security Lead EALA, Accenture Christian Franzen, Senior Manager, Cloud Security EALA, Accenture AWS Summit Berlin 2016

2 Business share many of the same security challenges when adopting to the cloud Interoperability Vendor lock-in Service levels Operational risk IT operating model Business Operations Control & Governance Strategy and Risk Management Contractual controls Jurisdiction handling Data ownership TCO Security policies Threat Management Access management Data integrity Data destruction Security Data residency Privacy Policy & Procedures Regulatory landscape Certifications Compliance Copyright 2016 Accenture All rights reserved. 2

3 Accenture`s intelligent security solutions empower the business cloud adoption Governance & Risk Management Employees Cloud Virtualization Security Contractors Private Public Hybrid Foundation Security Business Partners Customers/ Citizens Industrial/ Operations IoT Consumer/ Device IoT Security Broker Application Security Digital Identity Enterprise Security Devices Mobile Social Media Data Privacy and Protection Sites Cyber Defense Business Services Copyright 2016 Accenture All rights reserved. 3

4 How to move to the cloud when your data is subject to high privacy requirements? Situation The client wanted to migrate multiple local application to a new cloud based platform All of these local systems managed sensitive personal information Each country has local data privacy laws and regulations on exporting data Challenge No clear-text export - Only anonymized export Ban on export outside the country or region Solution 1 Report, searches, 2 filters, records are sent in clear text 4 Charles Poitier c.p@client.com My Address 3CD 4FH ID Charles Poitier c.p@client.com My Address 3CD 4FH ID Data presented in clear text Client Network 3 Sensitive information is encrypted Char es Poitier c.p@vodafo e.commy Address Char es Poitier c.p@vodafo e.commy Address Results come encrypted Accenture implemented an encryption gateway which encrypts personal information before it leaves client premises Some functional tradeoffs had to be made, but the gateway enabled a global deployment of the cloud service despite data privacy requirements This solution works well with AWS RDB Copyright 2016 Accenture All rights reserved. 4

5 Common security questions that should be addressed as part of cloud based deployments Governance, Policies & Compliance 1 Where is my data? Understand local/geo specific boundaries of datacenters. 2 Is my data mixed with other clients? Ensure separation of data in multi-tenant environment like provisioning of own database etc. 3 What are the legal requirements? Match certifications, policies and practices with client requirements. Copyright 2016 Accenture All rights reserved. 5

6 Common security questions that should be addressed as part of cloud based deployments Technology 1 How to integrate with on-premise? Evaluate level of integration with existing process/environment. 2 How to do Identity and Access Management? Determine, manage, and enforce access and authorization levels that align to the business. 3 Is sensitive data allowed in the cloud? Measure the practice against PCI or any other relevant standard. Copyright 2016 Accenture All rights reserved. 6

7 Common security questions that should be addressed as part of cloud based deployments Operations 1 Can admins get to the data? Understand maintenance and operations processes and level of access. 2 How to find out about data breaches? Define processes to make appropriate notifications in an adverse situation. 3 How to handle HA and BC/DR? Understand DR, backup strategy along with scalability and redundancy of environment. 4 What security does the vendor offer? Determine unique security features like IP-based restriction, customizable security roles, etc. Copyright 2016 Accenture All rights reserved. 7

8 Identifying never before seen, network-born cyber threats in near real-time Challenges to security analytics Analytic capabilities Explosion of log information coming from a multitude of devices and new sources. Network / DNS SIEM Logs Behavioral Data Threat Intel Analyst Intel Too many false positives due to static rule writing and analyzing data without context and long baseline training. On premises computing / storage capacity is constrained and expensive. Deep Radar Cloud Runs on AWS cloud and integrates with AWS logs and flows 10x faster than conventional platforms through advanced scaling with direct Intel processor technologies (20 Billions events / day) Out of the box capability and unsupervised learning Existing tools are focused on situational awareness through signature matching and rules. Labor intense handling of vast amounts of security incidents. Outcomes Effective day one and continuously improved by learning Benchmarked +95% accuracy in threat detection Advanced visualization Copyright 2016 Accenture All rights reserved. 8

9 Accenture security practice is growing at scale and is a key enabler for digital businesses 20+ years of experience helping clients secure their organizations People 3, Clients spanning 67 countries Running some of the largest SIEM deployments in the world Cloud security, management and control for 20,000+ cloud computing instances Centers of Excellence India, Philippines, Czech Rep., USA & Argentina Copyright 2016 Accenture All rights reserved. 9

10 Appendix 10