Grounded in the Cloud
cancel
Showing results for 
Search instead for 
Did you mean: 

Technical Cloud Security: Data protection in the cloud

SimonLeech

This is the fourth in a series of videos and blogs looking at some technical aspects of hybrid cloud security. Today we will discuss the need for data protection in the cloud. Other videos in the series can be found by searching for the tag cloudsectechvideos.

Some of the challenges that organizations are faced with when moving into the cloud are around how to protect corporate data, and what will happen to that data if the organization were to be breached. Before the decision to move into the cloud is made, a full data classification needs to take place to allow the organization to understand where their core assets are located, and what the impact of moving the data into the cloud would be. It’s important to take into consideration the value of the data both to the business, but also to cybercriminals, and understand how that data relates to the compliancy regulations that the organization will need to comply with.

Data encryption can provide a solution to many of the worries that organizations have, but any approach to data encryption needs to take into consideration data at rest, data in motion, and data in use. Traditional approaches to data security have tended to focus on individual aspects of the data security lifecycle, often leaving gaps in the approach, which could theoretically leave the cybercriminal with access to data that he otherwise shouldn’t be able to see.

At HPE we address this concern by following a data-centric approach to security. We offer encryption solutions that follow the data throughout the lifecycle, providing persistent protection that travels with the data itself. We use Format Preserving Encryption, or FPE, to maintain the original format of the data, allowing it to continue to be useful for business processes, whilst being stored in a way that is not decipherable to an unauthorized party.

This video goes into more detail and looks at some of the things to think about in terms of data protection in the cloud.

 

 

To learn more about hybrid cloud security, download the whitepaper from 451 Research Group. You can also learn more about the HPE approach to Hybrid Cloud Security. For information about HPE’s approach to data security, please visit this page, and for additional thoughts on data protection in the cloud, listen to me on a recent Technative podcast. Other videos in the series can be found by searching for the tag cloudsectechvideos.

  • HPE Cloud
0 Kudos
About the Author

SimonLeech

Simon Leech is a Certified Information Systems Security Professional with a specialisation in Security Architecture (CISSP-ISSAP), Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC), Certified in Cloud Security Knowledge (CCSK) and Chief Technologist Security within the Hewlett Packard Enterprise EMEA Hybrid IT Team. Within Hewlett Packard Enterprise, Mr Leech is responsible for influencing and evangelising the security strategy of the Hybrid IT team. Simon is active on Twitter as @DigitalHeMan

Events
28-30 November
Madrid, Spain
Discover 2017 Madrid
Join us for Hewlett Packard Enterprise Discover 2017 Madrid, taking place 28-30 November at the Feria de Madrid Convention Center
Read more
See posts for dates
Online
HPE Webinars - 2017
Find out about this year's live broadcasts and on-demand webinars.
Read more
View all