Get Your Head in the Cloud with Control

Get Your Head in the Cloud: A Practical Model for
Enterprise Cloud Security
Vishal Gupta, Vice President, Symantec Enterprise Security Group
MAGIC SHOW
How to deliver 47 slides in 15 minutes

Copyright © 2014 Symantec Corporation
2
Warning
This is a short fifteen minute presentation. No superfluous
content is enclosed. There are no cloud adoption metrics,
no data breach statistics, no distracting logos or graphics
and absolutely no diagrams with concentric circles,
pyramids, arrows or other geometric shapes regularly used
to convey depth of information. No part of this presentation
is fictional and all resemblance to real organizations and
people is completely intentional.

3
there is only one word you need to know when talking about the cloud

4
CONTROL

5
all the benefits you receive from moving to the cloud: agility, elasticity, and low
cost are received by giving up

6
CONTROL

7
all the challenges you face in the cloud: security, compliance, data residency, data
privacy and management are rooted in your lack of

8
CONTROL

9
the only reason you have not moved your critical workloads to the cloud is
because you cannot afford to give up

10
CONTROL

11
you want to keep the benefits but resolve the challenges

12
CONTROL?
how do you give it away and keep it at the same time

13
Warning
This is a short fifteen minute presentation. No superfluous
content is enclosed. There are no cloud adoption metrics,
no data breach statistics, no distracting logos or graphics
and absolutely no diagrams with concentric circles,
pyramids, arrows or other geometric shapes regularly used
to convey depth of information. No part of this
presentation is fictional and all resemblance to real
organizations and people is completely intentional.
∧
just a few

14
this is your enterprise – your temple of complete
CONTROL

15
before cloud, you held your infrastructure and applications safe
within its walls
----
----
----
---

16
then cloud happened
----
----
----
---

17
your infrastructure started moving over
----
----
----
---
CONTROL
you lost some

18
----
----
----
---
your applications started moving over too ----
----
----
---

19
----
----
----
---
----
----
----
---
CONTROL
you lost more

20
----
----
----
---
----
----
----
---
in addition cloud endpoint, mobile, BYOD,
have all spiraled

21
----
----
----
---
----
----
----
---
CONTROL
out of your

22
that teeny tiny bit is all you seem to have left
CONTROL

23
CONTROL
would you like to get it back?

24
audience tongue twister test
can you say the following
HE WHO CONTROLS THE CONTROL POINTS CONTROLS THE CONTROL

25
CONTROL = CONTROL POINTS

26
----
----
----
---
----
----
----
---
lets add some control (points) back to the picture

27
----
----
----
---
----
----
----
---
endpoints
SaaS
IaaS/PaaS
storage
the cloud killed the perimeter – what shall we do
about that control point?

28
hold that thought

29
also remember – cloud challenged SIEM
hold that thought too

30
A MODERN CONTROLS BASED MODEL FOR SECURITY

31
securing the modern endpoint

32
----
----
----
---
endpoints
the modern endpoint is heterogeneous
IaaS/PaaS

33
traditional, mobile, multiple clouds
devices, desktops, servers
----
----
----
---
endpoints
IaaS/PaaS
WE NEED HOMOGENOUS SECURITY
ACROSS HETEROGENOUS ENDPOINTS

----
----
----
---
endpoints
IaaS/PaaS
34
REMEMBER… CONTROL = CONTROL POINTS
1 Grab a common security agent
2 Embed in your on-prem endpoints
3 Put it on your mobile endpoints
4 Natively integrate it into your IaaS/PaaS
infrastructure
5 Enjoy the control
• Homogenous policies
• Visibility, Control and Compliance
• Correlation and Analytics

35
securing modern applications

36
----
----
----
---
----
----
----
---
modern applications live in the cloud
SaaS

37
----
----
----
---
----
----
----
---
we don’t control any part of that stack
where shall we put our control point?
SaaS
WE NEED A NEW CONTROL POINT
THE CLOUD SECURITY BROKER

38
----
----
----
---
----
----
----
---
SaaS
1 External control point
2 Proxy and API based
3 Context, content and identity aware
4 Enjoy the control
• Email, storage and application support
• Event monitoring, SSO, data protection
• Compliance and audit ready
remember the first thought you were holding
THE CLOUD SECURITY BROKER

39
so what?

40
----
----
----
---
endpoints
IaaS/PaaS
----
----
----
---
SaaS
storage
----
----
----
---
when all these control points can communicate intelligently
what you get is nothing short of
MAGIC

41
----
----
----
---
endpoints
IaaS/PaaS
----
----
----
---
SaaS
storage
----
----
----
---
get ready to harness the power of the cloud
----
----
----
---
1 The cloud powered SOC
2 The future of SIEM – on-prem and cloud telemetry
3 Cross-control point data correlation
4 Enjoy the control
• Advanced Threat Protection
• User behavior, data flow and threat
intelligence
• Prioritized and actionable
WITHOUT GIVING UP CONTROL

42
there is only one word you need to know when talking about the cloud

43
CONTROL

44
actually, there is a second thing you need to know about
control in the cloud

45
you can have it today with

Thank you!
Copyright © 2014 Symantec Corporation. All rights reserved. Symantec and the Symantec Logo are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Other names may be
trademarks of their respective owners.
This document is provided for informational purposes only and is not intended as advertising. All warranties relating to the information in this document, either express or implied, are disclaimed to the maximum extent allowed by
law. The information in this document is subject to change without notice.
Vishal Gupta
46

Get Your Head in the Cloud with Control

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Viewers also liked

Viewers also liked (20)

Similar to Get Your Head in the Cloud with Control

Similar to Get Your Head in the Cloud with Control (20)

More from Symantec

More from Symantec (20)

Recently uploaded

Recently uploaded (20)

Get Your Head in the Cloud with Control