securing cloud content:are your policies restricting innovation?

abhay rajaramvp customer successaugust 21, 2012

agenda

no, really

• the landscape• the real challenge• framework for moving forward

the landscape

• myriad cloud services• byod mixed reviews• how consumerized can IT get?• no simple answers for security

cloud security == oxymoron?

Dropbox Admits SpamWas Due to SecurityBreach

Zappos customer data accessedIn security breach

Researchers uncover AWS securityvulnerabilities

Sony’s Security Breach May BeThe Biggest Personal Data Heistin History

Another black eye for Amazon? Hackers may have used AWS in crippling Sony attack

Foursquare security breach exposes 875,000 check-ins

one approach to the problem

• bans Dropbox, iCloud and other ‘public cloud content services’

• ’we found a tremendous lack of awareness as to what constitutes risk. we’re trying to make people aware’ ibm cio jeannette horan

• employees now use IBM-hosted MyMobileHub

the reality – workers will circumvent IT solutions

• 50% of workers say they have better technology at home

source: forrester, ‘enablement not control,’ june 2012

an example from the real world

• operate in 30+ countries

• content is core asset• IT solution (FTP)

viewed as complex and incomplete

• employees had already embraced the cloud

getting the balance right

securityproductivity

what do workers want

• usability

• flexibility

• security

• holistic solutions

security basics for cloud content collaboration

• centrally managed policies• encryption device to data center• mobile device controls• regulatory standards compliance• auditing, reporting, e-discovery

getting the balance right: are we asking the right questions?

business needs IT solutions

content collaboration is evolving in real time

• mobile, enterprise social, sharepoint evolution• email is dead, long live email!• consolidation?• no one size fits all…• case in point – Procter and Gamble

framework for secure cloud content sharing

• what belongs in cloud?• what’s at risk?• responsible behavior

educate

• start simply• audit user activity• establish policies• plan for change

audit &manage empower

• enable workers• delightful user

experience• fits users’ workflows• enhance productivity• culture of trust

a success story

• international ad agency• empowered workers to

work smarter with clients

• secure, online file-sharing for campaigns, commercials

• simplified collaboration with enterprise class security

summary

• what content belongs in the cloud?• what does the business need?• can vendors be accountable on security?• are you educating users on security risks?• what is your policy on auditing content sharing?

thank you!

contactabhay.rajaram@yousendit.com