CLOUD SECURITY

Eighty percent of IT and security professionals prioritize zero trust, says a new survey

Cloud Security Alliance | June 07, 2022

Cloud Security Alliance
The RSA Conference takes place every year in San Francisco. CISO Perspectives and Progress in Deploying Zero Trust was issued today by the Cloud Security Alliance (CSA), the world's largest organization dedicated to developing standards, certifications, and best practices to help ensure a safe cloud computing environment. The exploratory study, conducted by the Zero Trust Advancement Center (ZTAC), interviewed over 800 IT and security experts to discover where Zero Trust ranks as a priority inside their organizations, as well as the top business and technical difficulties they've faced throughout implementation.

"The philosophy of Zero Trust has the potential to fundamentally reshape our approach to securing the technology we use across the board over the course of the next few years. Arriving at this destination requires greater clarity and a common understanding of Zero Trust principles as well as articulating concise strategies and adopting the appropriate frameworks. This survey is data rich and should be carefully contemplated by the industry to identify the roadblocks and opportunities for pervasive Zero Trust. CSA is aggressively producing valuable research such as this within our Zero Trust Advancement Center to bring the topic in focus for our community," said Jim Reavis, CEO, of Cloud Security Alliance.

The study gathered 823 responses from IT and security experts from diverse business sizes and regions, including 219 C-level executives. This is the first part of a multi-part survey that will take place this year. Courses in Zero Trust architecture and strategy, a CloudBytes webinar series, multiple research whitepapers, an annual Zero Trust Summit to begin in Q4 2022, and new professional certification, the Certificate of Zero Trust Knowledge, are among the ZTAC's upcoming initiatives during the next 18 months (CZTK).

The Zero Trust Advancement Center builds on the breakthrough Software-Defined Perimeter study series, Cloud Controls Matrix, Enterprise Architecture, and other relevant virtualized security concepts developed by the CSA. Organizations can sign up for the initiative and register their interest at cloudsecurityalliance.org/ZT.

Spotlight

Whether it’s the world’s largest insurance company, or the local PR consultancy, it is clear that cloud computing is big business. IHS estimates that global business spending on the cloud (infrastructure and services) reached $174.2 billion at the end of 2014, up 20 percent from 2013.1 By 2017, that number is expected to reach $235.1 billion, triple what it was in 2011. Cloud is so critical that Gartner predicts by 2016 it will outstrip all other IT spending for the corporate world.

Spotlight

Whether it’s the world’s largest insurance company, or the local PR consultancy, it is clear that cloud computing is big business. IHS estimates that global business spending on the cloud (infrastructure and services) reached $174.2 billion at the end of 2014, up 20 percent from 2013.1 By 2017, that number is expected to reach $235.1 billion, triple what it was in 2011. Cloud is so critical that Gartner predicts by 2016 it will outstrip all other IT spending for the corporate world.

Related News

CLOUD APP DEVELOPMENT

Service Express Acquires iTech Solutions Group and iInTheCloud

Service Express | July 05, 2022

Service Express, a leader in global data center and infrastructure solutions, announces the acquisition of managed services provider iTech Solutions Group and cloud hosting provider iInTheCloud. The acquisitions bring expanded IBM-specific offerings and IBM Gold Business Partner status to Service Express customers in the U.S. This deal replicates the company's existing IBM services, expertise and IBM Gold Business Partner status in the U.K. to bring comprehensive solutions to customers internationally. Based in Connecticut, iTech has over 20 years of experience offering expert solutions as an IBM Gold Business Partner. The company has worked alongside financial services, manufacturing and retail organizations, helping customers leverage IBM i infrastructure strategies. The acquisition of iTech brings a team of certified technical consultants, IBM i system administrators and skilled technicians with a deep understanding of IBM Power® Systems. "At iTech, we take pride in our dedication to the success of our people and customers. Joining Service Express gives us the ability to expand our service offerings to existing and new customers, which was challenging as a smaller organization. I'm looking forward to working with the Service Express team to create synergy and bring our solutions to more companies around the globe." Pete Massiello, President of iTech Solutions Group In addition to hardware solutions, consulting and managed services, iTech provides customers with IBM i cloud hosting solutions by utilizing iInTheCloud infrastructure. iInTheCloud is a cloud hosting provider with Tier III data centers built on IBM Power Systems to deliver secure, scalable and resilient solutions for companies running IBM i, AIX and PowerLinux. iInTheCloud allows organizations to host production, test, development or replicate environments to support disaster recovery and business continuity. The company's Michigan-based data centers grant companies access to redundant power, cooling and communication feeds ensuring environments are highly available. "My focus has always been on creating flexible, reliable, and scalable solutions for IBM i and Power System customers around the Midwest," said Larry Bolhuis, Co-President of iInTheCloud. "With Service Express' headquarters only minutes from our data centers, the company has been the go-to service provider for many of our customers, as well as for iInTheCloud since its inception. I'm excited to expand our support options and capabilities for our new and existing customers." Service Express offers an extensive portfolio of solutions, including data center maintenance, managed and infrastructure services designed to help customers maintain and evolve their digital IT strategies. "The acquisition of iTech and iInTheCloud accelerate the expansion of our managed and infrastructure service offerings to the U.S.," said Ron Alvesteffer, President and CEO of Service Express. "We anticipate strong company growth as we continue to broaden and diversify our solutions, bringing a wider portfolio of services to customers in the U.S. and U.K." About Service Express Service Express is an industry-leading data center solutions provider specializing in global multivendor maintenance, hybrid cloud, managed and infrastructure services, hardware solutions and more. Companies around the globe trust Service Express to deliver reliable end-to-end support. Service Express' flagship technology, ExpressConnect®, helps IT teams automate support with monitoring, ticketing, integrations and account management. About iTech Solutions Group iTech Solutions, an IBM Gold Business Partner, helps organizations get the most performance, utilization and return on investment from existing or new IBM Power® Systems running IBM i, while ensuring critical business data is secure. Offerings include IBM Power Systems and storage, managed administration and OS subscription services, IBM i cloud hosting, OS Upgrades, PTF maintenance, HMC and FSP Upgrades, security assessments and remediation, HA replication solutions, DR testing, tape and disk encryption, virtual tape libraries, and more. About iInTheCloud iInTheCloud specializes in IBM i cloud hosting solutions by leveraging IBM Power® and IBM Flash Systems in its Tier III data centers. The company works alongside organizations to deliver secure, scalable and resilient solutions to meet specific system requirements. With iInTheCloud's secure cloud, companies can consolidate workloads, increase server utilization, reduce capital costs, lower management costs, virtualize and provision memory, processor, and I/O resources.

Read More

CLOUD DEPLOYMENT MODELS

Flowmon's Latest Release Expands Multi-cloud Monitoring and Threat Detection

Progress Software | July 01, 2022

The reputable infrastructure software vendor Progress (Nasdaq: PRGS) recently unveiled the latest version of Progress Flowmon, a standout network visibility and security solution. Progress has added native flow logs from Google Cloud, and Microsoft Azure to its support for public cloud provider flow log monitoring in the Flowmon 12 network solution, as well as introduced additional potent and sophisticated features for anomaly identification. With this update, businesses may now use public cloud providers to deploy their applications and services, cut monitoring expenses, and get complete visibility into their hybrid infrastructure via a single user interface. For many contemporary enterprises, the network serves as an essential enabler. IT infrastructure management is made more challenging and makes operations more difficult by growing system interconnectivity, larger data quantities, and cloud migration. Securing a high level of monitoring and control in a hybrid environment that includes both on-premise data centers and private and public clouds is challenging for organizations. Traditional methods of monitoring, however, are unable to resolve the issue. "To build and operate an efficient and secure hybrid cloud environment, organizations need comprehensive visibility without swivel chair management and manual aggregation of data. With the latest release of Flowmon network solution, Progress extends capabilities in this area by simplifying network visibility for customers who are expanding their footprint in the public cloud. Our ongoing focus on helping customers improve their cybersecurity posture is leading to additional innovations fueled by the combined use of advanced threat detection techniques," Jason Dover, VP, Product Strategy, Enterprise Application Experience, Progress Flowmon 12 eliminates the need for and expense of maintaining numerous tools by providing complete visibility over an organization's complete hybrid cloud deployment via a single user interface. Through the newly announced support for native flow logs from Google Cloud and Microsoft Azure and the increased support for Amazon Web Services (AWS) flow logs, organizations may monitor traffic from on-premises, AWS, Azure, Google Cloud, or any mix thereof. Additionally, by deploying customized Flowmon Probe virtual appliances for applications needing more in-depth monitoring, they can also reduce the expenses associated with traffic mirroring and eliminate the use of built-in cloud providers monitoring tools. "Based on the nature of our business and reliance on our infrastructure to deliver customer value, we simply can't afford issues that might impact security or performance. Because of this, maintaining consistent and deep visibility is key to our IT operations. Our security needs have been addressed by Flowmon for years, and after a short experience with the new version, I can confirm that we are happy with the direction this product is taking. With Flowmon 12, Progress has significantly improved anomaly detection accuracy and provided us with new options to granularly tune the detection," said Pavel Charvat, Head of IT Security, Czech Statistical Office (CZSO).

Read More

CLOUD APP DEVELOPMENT

Infoblox Launches NIOS 8.6.2 to Help Businesses Transform Their Workplaces

Infoblox | June 15, 2022

Network Identity Operating System (NIOS) 8.6.2 has been released by Infoblox Inc., the leader in cloud-first DNS administration and security. This version increases visibility, user experience, and control for DNS/DHCP/IP address management (DDI) infrastructure across hybrid, multi-cloud settings, allowing for further workplace modernization. By enabling unified multi-cloud integration and automation, stronger DDI, value-added services, templated APIs, plugins for operational ease, and enhanced ROI, NIOS 8.6.2 expands Infoblox's renowned DDI market leadership. With this, customers benefit from: Multi-cloud integrations: DHCP for Google Cloud Platform (GCP) and NIOS v40x5 appliance support in AWS, Azure, and GCP optimize the hybrid workplace. Configuring DHCP services on vNIOS instances in GCP makes cloud migration easier and ensures that DHCP is served consistently to on-premise customers. DDI core enhancements: Multi-primary DNS failover for Dynamic DNS (DDNS) updates and TLS dynamic control for SAML Port 8765 strengthen control. By allowing DHCP servers to deliver updates to alternate servers automatically, DDNS failover improves the user experience for multi-primary zones. Value-added services: Add Reporting and Analytics virtual appliances in AWS and Azure to improve DDI visibility and simplify cloud migration and transport data identified by Network Insight or NetMRI through Infoblox's Cloud Services Portal (CSP) for visibility on the BloxOne platform. With DNS Traffic Control's (DTC) Health Monitor manual failback, 8.6.2 improves user control over problematic sites. DDI plugins: Integrations with Ansible 1.2.1, Terraform 2.1, Kubernetes ExternalDNS, Nutanix 5.20.x, RedHat OpenStack IPAM, and Cisco ISE 3.x identity management improve visibility, automation, and control. "We continue to deliver new cloud-first DDI capabilities to help customers build reliable connectivity into their hybrid workplace. This new set of features help customers future-proof their growing networks and further demonstrates our market leadership," Dave Signori, VP of Product Management at Infoblox San Marino Unified School District chose NIOS to upgrade its core networking infrastructure with fully automated DDI and "rock-solid" online service connectivity.

Read More