ALL » Computer-Programming >> View Article
Shadow It Also Brings Shadow CostsBy Expert Author: skyhighnetworks
When Susan Emsley, a nurse at Stanford Hospital, uploaded patient records to Dropbox, she felt like she was improving quality of care. With access to records across computers and mobile devices, doctors could immediately find information to make better decisions. “I mean, we all thought that this was a great way to put information at everyone’s finger tips and manage it electronically.”
Everything went well until Dropbox experienced a major security breach. Under the Health Insurance Portability and Accounting Act (HIPAA) the hospital was required to notify the 13,000 patients whose privacy was potentially compromised because their records were stored on Dropbox during the lapse in security, igniting a multi-million dollar lawsuit against the hospital.
The cloud is transforming business for the better, making employees more productive and the business more agile. Whether you take a cloud-first approach to major technology projects, or have a wait-and-see approach, employees in the business are using a plethora of different services and apps to do their jobs at the office and anywhere with an internet-enabled device. The average company now uses 626 different cloud services and this number is growing every day. But for CIOs, CISOs, and IT organizations, these unmanaged cloud services are causing concern about the privacy, security, and compliance of corporate data.
Most employees don’t go through an extensive vetting process before signing up for a new service on their computer or mobile device. Many cloud services don’t have enterprise-grade security. In a recent report, found that only 11% of cloud services were ready for the enterprise. Among cloud services:
• 15% multi factor authentication
• 4.3% have ISO 27001 certification
• 11% encrypt data at rest
IT organizations aren’t only worried about the company’s data when it leaves the building, the cloud presents a new platform to launch malware. That’s why the cloud is a top concern among enterprise IT and also being brought up more in risk management conversations. IT Security teams need a framework to assess the risk posed by cloud usage, track this risk over time, and take steps to reduce this risk. Having a quantifiable, objective framework also removes emotion from the equation and allows IT to have a data-driven conversation about balancing the benefits of cloud with the risks.
Before you take any steps to reduce the risk of cloud usage at your company, you first need to assess your current risk. You can think of this step as establishing your baseline level of risk, but you’ll use this same process to evaluate risk going forward. Starting this now is important so you can measure the impact of your changes and demonstrate all the risk you’ve reduced after you’re done. There are two main drivers of cloud risk: the risk of the cloud services based on their security controls, and the type of data and usage patterns of those services.
Each cloud security service presents different risks to your company’s data. A cloud service that stores data unencrypted, is hosted in an unfriendly foreign country, and asserts ownership over the IP uploaded to the service is inherently riskier than a service that does the opposite. Then there’s the use of the service that presents risk. When regulated data like social security numbers or credit card numbers makes it way to the risky cloud service, the company is at greater risk than if less sensitive data like lunch menus were uploaded to the same service.
Skyhigh Networks, the cloud access security company, enables companies to embrace Cloud Analytics Services with appropriate levels of security, compliance, and governance while lowering overall risk and cost. With customers in financial services, healthcare, high technology, media, manufacturing, and legal verticals, the company was a finalist for the RSA Conference 2013 Most Innovative Company award and was recently named a "Cool Vendor" by Gartner, Inc. Headquartered in Cupertino, Calif., Skyhigh Networks is led by an experienced team and is venture-backed by Greylock Partners and Sequoia Capital. For more information on Shadow IT to Visibility and Cloud Control, visit us at http://www.skyhighnetworks.com/shadow-it/ or follow us on Twitter@skyhighnetworks.
Computer Programming Articles1. How The Uber Ios App Clone Is Changing The Way The World Thinks And Operates
Author: Frances Harper
2. Out With The Old, In With The New, Let’s Welcome The Uber App Clone
Author: Felica Carroll
3. Computer Repair Service In Florida
4. Aquel Alquiler Coche Barato Alicante Atinge Un Tirafondo Acromático
Author: Gina Kohler
5. All That You Need To Know About The Process Of Auction Checkout
Author: Albert Denomme
6. Donde Alquiler De Coches En Alicante Acogolla Este Osco Undécuplo
Author: Pamala Hanes
7. Que Alquiler Coche Barato Valencia Se Entrecruza Ese Permiso Pensador
Author: Katharina Jolley
8. Un Alquiler De Coche En Alicante Abarraja Un Hiperónimo Vasodilatador
Author: Marko Angliss
9. El Alquiler De Coches En Mallorca Que Acolita Por Lo Que Respecta A Este Hotel
Author: Staci Commons
10. Should Our Church Build A Custom Church App? Nashville, Tn.
Author: Michael Brody
11. Using 6 Basic Charts To Create Effective Reports
Author: Paul Andrews
12. Challenges And Solutions In Testing Banking Applications
Author: Roberto Romello
13. Learn Selenium Online – Selenium Automation Testing
Author: Mind Q Online
14. How The Birth Of Uber Has Set Up An On-demand Revolution
Author: Archie Cadell
15. It Support Centre