To Get Cloud Security Cooking, You Need The Right Recipe For Success

Slow down a development team with security, and expect to be greeted with a wave of frustration.

Between a lack of integration of security tools and confusion about shared responsibility, security teams are often playing from behind when it comes to defending cloud environments. Meeting the needs of DevOps and the multiple clouds that companies now need to protect requires a unified platform that automates security controls and compliance for hosts and containers regardless of the cloud provider or deployment model. To get cloud security efforts cooking, organizations need the right ingredients for effective security.

Ingredient #1: Unified and Portable

Let’s start with an unfortunate truth. Traditional security tools simply do not work in the cloud; they are not designed to scale alongside dynamic cloud environments. The end result is gaps in visibility and security. Meeting those challenges with point solutions is untenable for security teams seeking to keep pace with the realities of a cloud-native world. As the limitations of those point products became apparent, it led to ad hoc approaches designed to address blind spots and a lack of integration. Eliminating visibility gaps takes a cloud-native security platform—a unified solution capable of providing visibility into the ever-growing amount of containers and microservices today’s organizations need to protect. Armed with comprehensive visibility and continuous workload discovery, these platforms support efforts to identify vulnerabilities and ultimately help DevOps teams weave security into CI/CD workflows so that issues can be fixed before they reach production. Security has to move at the speed of DevOps, and it needs to work across any cloud so that when workloads move, security and visibility is maintained. It’s a multi-cloud world, and security solutions need to live in it.

Ingredient #2: Automated and Fast

Rapid changes are a part of that world as well. Microservices, for example, can be quickly spun up and are often short-lived. While they can simplify application updates, they are also a reminder of how dynamic cloud environments are. Enterprises need to know what is running, where, and who is running it. With automated asset discovery and monitoring, organizations can get a handle on everything happening across their cloud environment without slowing anything down.

As noted earlier, integrating security with CI/CD improves security by enabling a “shift left” approach. Automation allows security to be orchestrated more effectively to resolve vulnerabilities and security risks early in the development life cycle, though care must be taken to prevent security holes from being introduced via infrastructure-as-code (IaC) templates. In June, a survey of 300 CISOs performed by IDC revealed that 67% of respondents viewed security misconfigurations in production environments as a top concern. By automating the discovery of misconfigurations, organizations can reduce the chance one will slip through their defenses and impact their customers or business.