Earlier this week, we gave you a glimpse at how the Twitter verse hilariously reacted to the DDoS hack on October 21st. And while pondering the idea of life without Twitter, Reddit, Netflix, and Spotify may have been entertaining, the event also reinforced the question: “Are we secure?” The issue is of particular importance when discussing cloud services and data security.
You may not be able to prevent an international internet outage, but there are things you should keep in mind when fine-tuning your security protocols.
- The cloud is different. Remember that the cloud and cloud services are unlike anything else that exists in technology today. For Tim Prendergast the cloud is “living, breathing, and rapidly changing,” and its security should also be just as quick to evolve.
- Traditional security is out. Unlike on-prem technology and traditional infrastructure, the cloud runs on a variety of platforms which leverage API-driven solution that render traditional security practices obsolete. According to Prendergast, “cloud environments are so fundamentally different from their static on-premises counterparts that they require an entirely new way of administering security practices, and this means adopting new cloud security technologies that provide extreme visibility." MSPs, it is time to adjust your approach.
- Determine if the threat is real. The same APIs that require specialized security protocols create scenarios which require MSPs to determine quickly if a security threat is real. With APIs in place, digital security providers must implement new safe guards to ensure that cloud services and stored data is secure. Automation may be the answer to overcoming these challenges.
- Compliance is on your side. Industry evolution has forced security protocols into catch-up mode. Fortunately for MSPs, new compliance standards have been defined, something Prendergast fully embraces: “We will have the means to assess security posture against industry-defined best practices.” These new protocols also suggest that MSPs and their customers can be sure the right steps are taken to keep both infrastructure and intellectual property protected.
It shouldn’t come as a surprise to MSPs that the move away from traditional infrastructure is happening at a much faster rate than initially anticipated. What may surprise you is that security standards are no longer the sole responsibility of the security guys. Understanding best practices as they pertain to security and field changes add to an MSP’s best chances for success.