SYS-CON MEDIA Authors: Stacy Gorkoff, Yung Chou, Bob Gourley, RealWire News Distribution, Paul Miller

Related Topics: Cloud Expo, SOA & WOA, Virtualization, Web 2.0, Open Web, Security

Cloud Expo: Article

Protecting Sensitive Information in the Cloud

Gartner Highlights the Growing Importance of Cloud Security Brokers

By David Canellos
PerspecSys President and CEO

Gartner recently published a report that highlights a trend that we have been experiencing over the past few years, namely, the growing number of enterprises wrestling with cloud data security, cloud compliance, and cloud data residency issues associated with storing and processing sensitive information in SaaS cloud applications. Gartner estimates that by 2016, 25% of enterprises will secure access to cloud-based services using what they term a Cloud Access Security Broker platform and that these platforms will reduce the cost of securing access by 30%. Based on what we have seen from our clients, I think the cost savings are a low estimate.

The report also highlights an important consideration that our enterprise clients have told us is critical to their IT departments. Gartner recommends that companies strongly consider a "unified" Cloud Access Security Broker solution that is capable of providing multiple security policy enforcement capabilities from a single platform in order to avoid separate siloed solutions. It is clear that this capability alone could be the driver for significant savings in the enterprise.

At PerspecSys, providing this sort of "platform" is a core part of the value our solution provides. The PerspecSys Cloud Data Protection Gateway delivers the ability to select your data protection policies, such as FIPS 140-2 encryption or tokenization (for needs such as Data Residency), in a single platform that meets needs across multiple cloud environments. For encryption, the capability to preserve SaaS functionality, such as Search, even when using strong NIST approved FIPS 140-2 algorithms is important not only for government organizations, but also enterprise's looking for the strongest forms of encryption. And for tokenization, we have validated our solution using outside independent IT Assessors and Auditors to validate compliance with the tokenization guidelines from the PCI Security Standards Council. Since enterprises need to reflect any changes in data protection policies across data in all of their cloud applications, a centralized cloud data management platform allows practitioners to make the change once and have that change propagate across all of their cloud systems (versus having to make independent changes and monitor enforcement across multiple clouds).

And here is an additional benefit to consider. A horizontal cloud data protection platform like PerspecSys is vendor-agnostic and supports multiple clouds. PerspecSys gives the enterprise the ability to reduce switching costs from one cloud app to another should company business requirements change. Vendor lock-in is often cited as a top concern by enterprises in moving to the cloud, and a centralized platform that supports cloud data protection across multiple SaaS clouds is an important capability to help address this issue.

To ensure they are getting the capabilities they need today and into the future, enterprises need to make sure they consider these important capabilities and certifications when they adopt Cloud Access Security Broker services.

Read the original blog entry...

•   •   •

PerspecSys Inc. is a leading provider of cloud data security and SaaS security solutions that remove the technical, legal and financial risks of placing sensitive company data in the cloud. PerspecSys accomplishes this for many large, heavily regulated companies by never allowing sensitive data to leave a customer's network, while maintaining the functionality of cloud applications. Based in Toronto, PerspecSys Inc. is a privately held company backed by investors that include Intel Capital and GrowthWorks.

More Stories By David Canellos

David Canellos is a security veteran who is now President and CEO of PerspecSys. An entrepreneur specializing in bringing innovative security and privacy solutions to market, he has been instrumental in establishing PerspecSys as the leader in the Cloud data Protection Gateway market.

Before joining PerspecSys, David held executive positions at Irdeto Worldwide, which acquired the company he led, Cloakware, which was a pioneer in encryption and digital rights management. Before joining Cloakware, he was the General Manager and Vice President of Sales for Cramer Systems (now Amdocs), a UK-based company, where he was responsible for the company’s revenue and operations in the Americas. Prior to his work with Cramer, David held a variety of executive, sales management and business development positions with the Oracle Corporation, Versatility and SAIC.

Comments (0)

Share your thoughts on this story.

Add your comment
You must be signed in to add a comment. Sign-in | Register

In accordance with our Comment Policy, we encourage comments that are on topic, relevant and to-the-point. We will remove comments that include profanity, personal attacks, racial slurs, threats of violence, or other inappropriate material that violates our Terms and Conditions, and will block users who make repeated violations. We ask all readers to expect diversity of opinion and to treat one another with dignity and respect.