Selecting the Right Digital Defenses in Public Cloud
The most effective cloud data security strategies feature several protective layers. System-level defenses, which constitute the outermost layer, secure the so-called plumbing of the cloud, or the compute containers, networks, operating systems and the other overarching components that facilitate cloud-based connectivity. Application-level security features follow.
Data-level protections form the final layer, which stands as the last line of defense against cybercriminals on the technology front. Past these layers stand your end users, who require training to ensure they don’t compromise the whole strategy.
While cloud-computing vendors are responsible for developing and deploying the data security features included in the first layer, internal IT teams or managed service providers must build out the two remaining strata.
Many cloud application environments are subject to established data security tools that have proven effective over time, including:
These assets give IT teams the power to address small-scale data security issues before they devolve into disastrous flaws. Public cloud adopters must take full responsibility when it comes to establishing data-level defenses. Most start by obtaining encryption services. Around two-thirds of data security experts agree that encryption is the best method for protecting sensitive information hosted on public cloud platforms.
Some firms leverage tokenization, which involves transforming valuable decipherable data into strings of random plaintext called tokens.12 Only users with access to token vaults can view the protected information in its unscrambled form. However, most businesses tend to go with encryption more often than not, as tokenization depends on user discretion.
Organizations embracing public cloud technology should devote considerable resources to establishing system-, application and data-level defenses, as well as training staff on critical data security best practices.
Learn more about securing the public cloud in our whitepaper Cloud Security Defined: Required Safeguards for 2019.