Friday, June 19, 2020

Where to protect all your data? With a unified cloud edge, it's easy

https://quicksolvo939231001.blogspot.com/2020/06/microsoft-office-365-account-locked.html

Where to protect all your data? With a unified cloud edge, it's easy

There are two main drivers to the need to protect sensitive data, privacy legislation and intellectual property protection against external breaches and insider threats. 58 percent of the world 's countries now have legislation in place, which will become more burdensome over time. Due to the steady stream of brand impacting, high-profile cases, breaches and insider theft of data is a frequently reported topic in the media. Breaches are costly due to fines, revenue loss, and cost of remediation.

Historically data protection was implemented via DLP at the endpoint and in the network of the business. Both approaches have strengths and weaknesses; network DLP is unable to monitor sensitive data movement to USB memory sticks, and endpoint DLP doesn't offer some of the more sophisticated DLP capabilities that require a lot of memory and computing power. Many customers deployed DLP solutions for both enterprises. 

Many non-enterprise DLP vendors have incorporated "DLP-lite" features to their products, mostly email and web security products, and some businesses have chosen DLP solutions over the enterprise.
Until widespread cloud adoption, the approach was sustainable. Ninety-five percent of businesses have or embrace cloud services and 79 percent agree that confidential data is stored there. In laptops, servers, sanctioned apps, unsanctioned Shadow IT apps, and moving from cloud to cloud, data is now everywhere. It no longer suffices to protect data within an organization's four walls.

Businesses, particularly those with a Cloud-First approach, responded to this challenge by offering a CASB solution, such as the MVISION Cloud product from McAfee. It can solve any or all of these cloud deployment issues depending on the product-MVISION Cloud solves them all.

However, the problem is that some companies are living with gaps in their protection, as they do not deploy multiple products. Endpoint DLP can not solve on the cloud, nor can cloud DLP solve on the endpoint, and web DLP can not solve on approved apps that allow online collaboration, or endpoint. 

You will understand why a single product is not a complete solution when looking at common use cases along with possible DLP leak vectors:
McAfee

Businesses are deploying multiple products to try and address this. That closes all the holes, but it has downsides. Multiple products are expensive to license, have higher overheads for IT management and complexity due to subtly implemented applications. These variations are due to various DLP policies, data classifications, and content extraction engines that make it difficult to ensure consistent product-wide identification, as data classifications that have been fine-tuned over time have to be re-implemented for each new product from scratch, resulting in a reduction in efficacy.

The Centralized Cloud Edge (UCE) solution from McAfee solves those issues. UCE is a mix of endpoint DLP, web SaaS proxy, and CASB, covering all possible channels of data leakage: endpoint, unsanctioned shadow IT apps, approved apps (including email), and file transfers to clouds. UCE is operated from a single screen, and everywhere uses the same DLP technologies, such as policy and content extraction engines, to optimize performance from consistent tests. Businesses may maintain their investment in those carefully designed classifications of data, allowing use across all dimensions and easy cloud extension. UCE is a cloud-based system that is highly scalable, with industry-leading uptime and availability.

No comments:

Post a Comment