{"id":5002,"date":"2021-02-01T00:51:37","date_gmt":"2021-02-01T00:51:37","guid":{"rendered":"https:\/\/wordpress-107195-2564297.cloudwaysapps.com\/?post_type=resources&p=5002"},"modified":"2022-06-08T12:18:13","modified_gmt":"2022-06-08T12:18:13","slug":"work-outside-the-borders-of-your-technology","status":"publish","type":"resources","link":"https:\/\/www.cloudrise.com\/resources\/work-outside-the-borders-of-your-technology\/","title":{"rendered":"Work Outside the Borders of Your Technology"},"content":{"rendered":"
\n
\n
\n
\n
\n

Don\u2019t let antiquated data protection technologies define the boundaries of how you can protect your data.<\/strong><\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

\n
\n
\n
\n
\n

Technologies like data loss prevention (DLP) have literally been around since 2000, so in essence many organizations are using a 20-year-old technology as the heartbeat of their data protection programs. Let\u2019s face it, the way organizations have been addressing data protection is completely antiquated. Sure, some have been optimized and other new players have joined the DLP field, but for the most part the original DLP vendors are shells of what they once were. Like legacy ERP systems such as J.D. Edwards, Siebel or Baan, they probably are not meeting organizations\u2019 needs like modern-day WorkDay, Salesforce and ServiceNow platforms are.<\/p>\n

Transforming from old-guard technology institutions to modern platforms that meet organizations\u2019 business requirements is an incredibly heavy lift. Not to mention the fact that data has changed, moved, transformed, and multiplied\u2026driving organizations to purchase more point-solutions to solve the data challenge de jour.<\/p>\n

Similar to my first blog, you are going to get my raw and (I like to think) informed opinion about how organizations should be taking a data-centric approach to securing it. Don\u2019t let antiquated data protection technologies define the boundaries of how you can protect your data. In this blog I am going to talk about a more agile approach to securing your data, working outside the borders of your technology, introducing automation, and getting attention for the data component of your larger digital transformation initiatives.<\/p>\n<\/div>\n

<\/div>\n<\/div>\n<\/div>\n
\n
\n
\n

THE DATA\u00a0<\/b><\/h2>\n

What are you protecting? It should be an easy question, but it\u2019s not. In fact, it\u2019s almost impossible unless you have to have a clear understanding of how data is created, how it\u2019s used, who owns the data stores, and what the effects are on the data when you apply different controls. To take a truly data-centric approach to securing it, you cannot be married to the technology, but instead you need to be married to the understanding of the data.<\/p>\n

How is that even accomplished? I think the best way to go about identifying what data to protect is by defining a very targeted scope centered around the data and not around the technology. The importance of this approach is compounded when tackling the data protection component of a broader digital transformation initiative.<\/p>\n

Digital transformation started with lift and shift of the infrastructure and computing to a cloud service provider (i.e. Amazon, Microsoft, Google, IBM), and suddenly organizations were in a new position \u2013 a shared responsibility model. Now organizations have a hybrid environment of cloud and on-prem, with on-prem protection tools and mindset. Amidst this digital transformation, throw in a pandemic and we are seeing the fastest move to the cloud ever, as well as an exponential growth of data.<\/p>\n

So, I return to my original statement. In this world of exponential data growth sprinkled throughout the prem and cloud, how do organizations know what to protect? Organizations should consider working with a partner to help them secure their data during the digital transformation journey. How is data created, how is it used, who owns the data stores, and what are the effects on the data when you apply different controls?<\/p>\n

For example, customers approach us with the following requirement: \u201cI want to implement the latest and greatest SASE solution to protect my cloud environment.\u201d<\/p>\n

It would be easy for us to implement, configure, and hand them the keys, but is that really the best long-term solution for our customer? No.<\/p>\n

The question should really be: \u201cWe need to protect our data. It is moving into XYZ environments, we are cloud first and are amid digital transformation at every level. How can you help?\u201d<\/p>\n

A good partner should reaffirm a data-first approach to protecting it. Start with an assessment to understand how the data is created, how it is used, what controls are in place today, and how they can be optimized with existing technology. Maybe the organization ultimately does need new tech, but that should be an outcome of the assessment\u2026not a driver.<\/p>\n<\/div>\n

<\/div>\n<\/div>\n<\/div>\n
\n
\n
\n

THE TECHNOLOGY<\/b><\/h2>\n

Let\u2019s go back to my earlier comment about organizations purchasing point solutions to solve the data challenge de jour. I cannot argue with the rationale of needing multiple technology platforms to solve an organization\u2019s data security requirements. Need a classification tool? CASB? SASE? MDM? How about privacy tools to address ever-changing regulations? Key management? The list goes on\u2026<\/p>\n

Adding tools to your quiver of technologies takes time, money, and resources to implement and manage. While you may be solving for specific use cases or scope, deploying siloed solutions that are managed by disparate resources almost always results in underutilized technology. This is not just a missed opportunity, but organizations are never able to realize the full potential, value, and return on investment for their technology purchase. More importantly, these disparate tools require humans to aggregate and orchestrate the outputs into meaningful and consolidated results.<\/p>\n

Speaking of the people-equation, humans are still a key component of the technology solution, but instead of throwing more people at the tech, organizations need to take a more agile and automated approach to data protection. For example, organizations do not need a person who is triaging mass amounts of incidents and never solving the root problem, which is \u2014 why are these incidents being generated in the first place? If the same incidents are being generated over and over by people and\/or systems, it is one of two things:<\/p>\n

    \n
  1. There is no feedback loop. Without a feedback loop, organizations are unable to address behavior through training or information that they are getting from those systems.<\/li>\n
  2. Without information from the systems, there is no good logic or feedback to tune the policies. Let\u2019s face it, even with same input, policy tuning is a heavy lift, must constantly be done, and is typically performed by humans.<\/li>\n<\/ol>\n

    Again, don\u2019t let antiquated data protection technologies define the boundaries of how you can protect your data<\/p>\n<\/div>\n

    <\/div>\n<\/div>\n<\/div>\n
    \n
    \n
    \n

    WHERE TO START<\/b><\/h2>\n

    It can certainly feel like you need to boil the ocean to figure out what data to protect, how to protect it, which technologies to use, and how to manage and get value out of disparate systems.<\/p>\n

    Start with understanding your organization\u2019s data security requirements. Not just the requirements of IT, DevOps, and the SOC, but include business stakeholders, privacy, regulations, audit, finance, and security teams. Find a partner to lead an assessment and understand how the data is created, how it is used and what controls are in place today. Benchmark against industry and regulatory standards and identify gaps requiring remediation. Incorporate the requirements of the entire business, then identify and utilize technology and automation to reduce data risk.<\/p>\n

    The next step is critical and new to many organizations \u2014 automate. To properly enable the technology, data protection programs need to rely more on automation and less on humans. Automation can be used to perform system health checks, harmonize policies, and unify reporting and analytics into single pane reporting across disparate systems. Instead of performing these repetitive and often mundane tasks, humans can be used to define requirements for automation and ultimately tune the technology based on the intelligent outputs of the automation.<\/p>\n

    Why is automation so important? If you are a cloud-first organization that is in the business of selling data, creating data, and transacting data, that data is your livelihood. If humans continue to manage, monitor and tune the systems that protect your data, they will not have a fighting chance of keeping up with the growth of the data and the ever-changing environment. When tuning a particular use case is \u201ccomplete\u201d, the policy logic becomes antiquated within days or weeks.<\/p>\n

    For that reason, I believe organizations need to take an agile-based approach, introducing automation to address data protection initiatives within broader digital transformation journeys.<\/strong><\/p>\n<\/div>\n

    <\/div>\n<\/div>\n<\/div>\n
    \n
    \n
    \n

    SUMMARY<\/b><\/h2>\n

    Thank you for taking time to read my perspective on what I believe the best path to success in securing organizations\u2019 data \u2014 automate what you can. Don\u2019t let antiquated data protection technologies define the boundaries of how you can protect your data. Instead, take an agile approach to securing your data, working outside the borders of your technology, introducing automation, and getting attention for the data protection component of your larger digital transformation initiatives.<\/p>\n

    If you are interested in learning more about how we applied this approach to one of our customers, I recommend reading our Case Study<\/a> about a US health plan provider that experienced the \u201cperfect storm\u201d of challenges in their digital security transformation efforts. Discover how Cloudrise helped them automate manual processes and secure their remote workforce utilizing the Netskope<\/a> Platform.<\/p>\n

    My challenge to you: Look at large, board-approved, strategic initiatives and determine how you can apply cyber innovation to that project. It would be a small data lake project or massive digital transformation. Think about how a data-centric approach + automation could enable you to step out of the norm and do something different. Take the opportunity to challenge the way things have always been done.<\/p>\n

    By Rob Eggebrecht<\/em><\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n","protected":false},"featured_media":5003,"template":"","resource_category":[26],"featured_setting":[],"acf":[],"yoast_head":"\nWork Outside the Borders of Your Technology | Cloudrise<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.cloudrise.com\/resources\/work-outside-the-borders-of-your-technology\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Work Outside the Borders of Your Technology | Cloudrise\" \/>\n<meta property=\"og:description\" content=\"Don\u2019t let antiquated data protection technologies define the boundaries of how you can protect your data. Technologies like data loss prevention (DLP) have literally been around since 2000, so in essence many organizations are using a 20-year-old technology as the heartbeat of their data protection programs. Let\u2019s face it, the way organizations have been addressing […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.cloudrise.com\/resources\/work-outside-the-borders-of-your-technology\/\" \/>\n<meta property=\"og:site_name\" content=\"Cloudrise\" \/>\n<meta property=\"article:modified_time\" content=\"2022-06-08T12:18:13+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.cloudrise.com\/wp-content\/uploads\/2022\/06\/blog-workoutside.png\" \/>\n\t<meta property=\"og:image:width\" content=\"2128\" \/>\n\t<meta property=\"og:image:height\" content=\"485\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"8 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.cloudrise.com\/resources\/work-outside-the-borders-of-your-technology\/\",\"url\":\"https:\/\/www.cloudrise.com\/resources\/work-outside-the-borders-of-your-technology\/\",\"name\":\"Work Outside the Borders of Your Technology | Cloudrise\",\"isPartOf\":{\"@id\":\"https:\/\/www.cloudrise.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.cloudrise.com\/resources\/work-outside-the-borders-of-your-technology\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.cloudrise.com\/resources\/work-outside-the-borders-of-your-technology\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.cloudrise.com\/wp-content\/uploads\/2022\/06\/blog-workoutside.png\",\"datePublished\":\"2021-02-01T00:51:37+00:00\",\"dateModified\":\"2022-06-08T12:18:13+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/www.cloudrise.com\/resources\/work-outside-the-borders-of-your-technology\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.cloudrise.com\/resources\/work-outside-the-borders-of-your-technology\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.cloudrise.com\/resources\/work-outside-the-borders-of-your-technology\/#primaryimage\",\"url\":\"https:\/\/www.cloudrise.com\/wp-content\/uploads\/2022\/06\/blog-workoutside.png\",\"contentUrl\":\"https:\/\/www.cloudrise.com\/wp-content\/uploads\/2022\/06\/blog-workoutside.png\",\"width\":2128,\"height\":485},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.cloudrise.com\/resources\/work-outside-the-borders-of-your-technology\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.cloudrise.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Work Outside the Borders of Your Technology\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.cloudrise.com\/#website\",\"url\":\"https:\/\/www.cloudrise.com\/\",\"name\":\"Cloudrise\",\"description\":\"Cloudrise Data Protection and Privacy Services\",\"publisher\":{\"@id\":\"https:\/\/www.cloudrise.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.cloudrise.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.cloudrise.com\/#organization\",\"name\":\"Cloudrise\u2122\",\"url\":\"https:\/\/www.cloudrise.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.cloudrise.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.cloudrise.com\/wp-content\/uploads\/2022\/05\/logo-dark-1.png\",\"contentUrl\":\"https:\/\/www.cloudrise.com\/wp-content\/uploads\/2022\/05\/logo-dark-1.png\",\"width\":272,\"height\":113,\"caption\":\"Cloudrise\u2122\"},\"image\":{\"@id\":\"https:\/\/www.cloudrise.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.linkedin.com\/company\/cloudrise-inc\/\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Work Outside the Borders of Your Technology | Cloudrise","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.cloudrise.com\/resources\/work-outside-the-borders-of-your-technology\/","og_locale":"en_US","og_type":"article","og_title":"Work Outside the Borders of Your Technology | Cloudrise","og_description":"Don\u2019t let antiquated data protection technologies define the boundaries of how you can protect your data. Technologies like data loss prevention (DLP) have literally been around since 2000, so in essence many organizations are using a 20-year-old technology as the heartbeat of their data protection programs. Let\u2019s face it, the way organizations have been addressing […]","og_url":"https:\/\/www.cloudrise.com\/resources\/work-outside-the-borders-of-your-technology\/","og_site_name":"Cloudrise","article_modified_time":"2022-06-08T12:18:13+00:00","og_image":[{"width":2128,"height":485,"url":"https:\/\/www.cloudrise.com\/wp-content\/uploads\/2022\/06\/blog-workoutside.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"8 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.cloudrise.com\/resources\/work-outside-the-borders-of-your-technology\/","url":"https:\/\/www.cloudrise.com\/resources\/work-outside-the-borders-of-your-technology\/","name":"Work Outside the Borders of Your Technology | Cloudrise","isPartOf":{"@id":"https:\/\/www.cloudrise.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.cloudrise.com\/resources\/work-outside-the-borders-of-your-technology\/#primaryimage"},"image":{"@id":"https:\/\/www.cloudrise.com\/resources\/work-outside-the-borders-of-your-technology\/#primaryimage"},"thumbnailUrl":"https:\/\/www.cloudrise.com\/wp-content\/uploads\/2022\/06\/blog-workoutside.png","datePublished":"2021-02-01T00:51:37+00:00","dateModified":"2022-06-08T12:18:13+00:00","breadcrumb":{"@id":"https:\/\/www.cloudrise.com\/resources\/work-outside-the-borders-of-your-technology\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.cloudrise.com\/resources\/work-outside-the-borders-of-your-technology\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.cloudrise.com\/resources\/work-outside-the-borders-of-your-technology\/#primaryimage","url":"https:\/\/www.cloudrise.com\/wp-content\/uploads\/2022\/06\/blog-workoutside.png","contentUrl":"https:\/\/www.cloudrise.com\/wp-content\/uploads\/2022\/06\/blog-workoutside.png","width":2128,"height":485},{"@type":"BreadcrumbList","@id":"https:\/\/www.cloudrise.com\/resources\/work-outside-the-borders-of-your-technology\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.cloudrise.com\/"},{"@type":"ListItem","position":2,"name":"Work Outside the Borders of Your Technology"}]},{"@type":"WebSite","@id":"https:\/\/www.cloudrise.com\/#website","url":"https:\/\/www.cloudrise.com\/","name":"Cloudrise","description":"Cloudrise Data Protection and Privacy Services","publisher":{"@id":"https:\/\/www.cloudrise.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.cloudrise.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.cloudrise.com\/#organization","name":"Cloudrise\u2122","url":"https:\/\/www.cloudrise.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.cloudrise.com\/#\/schema\/logo\/image\/","url":"https:\/\/www.cloudrise.com\/wp-content\/uploads\/2022\/05\/logo-dark-1.png","contentUrl":"https:\/\/www.cloudrise.com\/wp-content\/uploads\/2022\/05\/logo-dark-1.png","width":272,"height":113,"caption":"Cloudrise\u2122"},"image":{"@id":"https:\/\/www.cloudrise.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/cloudrise-inc\/"]}]}},"_links":{"self":[{"href":"https:\/\/www.cloudrise.com\/wp-json\/wp\/v2\/resources\/5002"}],"collection":[{"href":"https:\/\/www.cloudrise.com\/wp-json\/wp\/v2\/resources"}],"about":[{"href":"https:\/\/www.cloudrise.com\/wp-json\/wp\/v2\/types\/resources"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.cloudrise.com\/wp-json\/wp\/v2\/media\/5003"}],"wp:attachment":[{"href":"https:\/\/www.cloudrise.com\/wp-json\/wp\/v2\/media?parent=5002"}],"wp:term":[{"taxonomy":"resource_category","embeddable":true,"href":"https:\/\/www.cloudrise.com\/wp-json\/wp\/v2\/resource_category?post=5002"},{"taxonomy":"featured_setting","embeddable":true,"href":"https:\/\/www.cloudrise.com\/wp-json\/wp\/v2\/featured_setting?post=5002"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}