FEATURE
With drastic changes that the migration to the cloud is bringing to security , it ’ s important to consider what organisations should do to cope with these changes .
are giving us the visibility that we need . We also know that for the same reasons , our response is far too slow in a new world where everything is connected with everything at Internet speeds . And it ’ s also very difficult to automate .”
Visibility
With the difficulties of having visibility across hybrid environments , Courtot says : “ We simply cannot secure what we do not know or see .”
He stresses the difficulty of always having an up-to-date global IT asset inventory to provide greater visibility .
“ So , we need to not only assess the security and posture of any device that connects to the network , we need to know that before they connect or at the time they connect ,” he said . “ That cannot be done manually . So , all of that needs to be automated .
“ Building such a global IT asset inventory which is always up to date that we can call the cartography of your enterprise and ensuring that we capture anything that connects with the network is really the cornerstone of a new security model . We need to build or rethink our security with that in mind .
“ We need to think about out of the box integration , building them at Internet scale with real time in mind , and ideally you want to have them , maybe not all of them , but as much as you can , natively build in that same cloud-based platform .
“ We always believed since the very beginning , since we created Qualys , that if you could bring all the telemetry into one place , then you could essentially correlate and analyse that information .”
Adopting an open cloud platform
With the resistance to cloud migration melting away , companies need to use these new technologies to become more competitive .
“ There ’ s a significant pressure on us to essentially migrate to the cloud , whether we like it or not ,” said Courtot .
We need to think about the cloud and how we can really create a seamless security or build security across these environments .
“ Now in that migration , we need to be very careful of falling into the same trap that we ’ ve been falling into before . Yes , best of breed is still very important for
38 www . intelligentciso . com