Making Security Part of your Cloud Strategy from the Beginning

With COVID-19, the movement to the cloud was faster than anticipated and while this move was inevitable, moving faster is not always safer.  The cloud offers many advantages including quick to market value, however, depending on the data (and applications) being leveraged, the processes and ways to get this done has vastly changed, with more options than ever before.

  • Identity Management for authentication (who are you) and authorization (are you allowed here) is different than when data was hosted on-site.  Moving to the cloud may have exposed data to “outside” the organization.
  • Patching your systems has always been a mundane task to complete, but now it can be more difficult in the cloud as data and IT sprawl enters the game.
  • Networking is no longer a simplified task of protecting your data center.  Now your data, application and access has moved to a work from anywhere (WFA) mentality.

The cloud has changed how we used to do things on-premise and each cloud (AWS/Azure/GCP/etc.) is different in how you set them up.  Having expertise on premise or in one public cloud does not necessary carry over to other cloud platform.  As companies grow, lack of features in one cloud will lead them to adopt a multi-cloud environment.  Then, they have cross data access (between clouds for application functionality) and management across totally different environments.  While companies like IBM are pushing to create new “standards” in this paradigm, adoption of these security standards will take years and in the meantime each public cloud vendor will continue to invest (ie. VMware of Carbon Black) and expand their security best practices and solutions into their offerings.
 
The biggest issues with the breaches or data losses in the past year have been with simply bad hygiene.  Just as with poor practices in terms of patching (which has been an issue for years), poor configuration of the cloud resources and the data contained therein, has been the number one source of the “How” they breach.  The “Why” are all the reasons mentioned above and more.
 
Until security is part of the solution, from the ground up, most companies will require multi-cloud views and checks to validate how their cloud environment are servicing the job they are meant to do and also conform to best practices within industry standards and regulations.   If you find yourself in this place, look at the Trend Micro Cloud Conformity solution. A very cost effective and multi-cloud view of your environment.  It is an agnostic viewpoint based on industry standards.  In addition, pre-defined playbooks and remediation steps are there to make it easy for a seasoned AWS professional to adjust the proper setting in GCP or Azure without having to Google search it first.

Free Cloud Health Check from Trend Micro and Champion Solutions Group

Get a complimentary automated check against the Amazon Web Services (AWS) Well-Architected Framework or CIS Microsoft® Azure™ Foundations Benchmark to see if you are building a secure and compliant cloud infrastructure. Request your Health Check here.

For more information about our Security services, call 800-771-7000 or visit: https://championsg.com/security.

PREV

Finding the New Normal: Contact Tracing Can Keep Workers Safer

WRITTEN BY:

Erick Bacallao joined Champion Solutions Group in 2015 after a career of Software Development in Cuba at the National Cancer Care Institute of Cuba, followed by moving to the States with allAware.

 

Champion acquired allAware and its properties and Erick has utilized his extensive background and expertise in IT and Software Development to rise to VP of Product Development in less than 5 years. During this time, Erick has been involved with key projects that led to the launch of numerous products including CSP Boss, Inscape platform and 365 Productivity Insights.

 

Erick has a Bachelor of Science in Computer Science from the University of Havana. He won Gold Medals for Programming from the Ministry of Education in Cuba, and he is certainly still a Gold Medalist for Champion!

 

As President and CEO, Chris is responsible for the development of key strategic alliances and solution portfolio. He leads Champion’s go-to market and execution strategies for integrated offerings in the cloud, in security, and in digital infrastructure, always focusing on improving the customer experience and driving transformative business outcomes.

 

He also aligns key partner initiatives with company strategy and oversees corporate marketing and messaging to gain mindshare with customers and partners. It’s his vision and innovativeness that have catapulted Champion up the ranks to become a $100M+ organization—and one of the most respected solution providers in the industry.

 

Over the past two decades, Chris has also focused on mergers and acquisitions, as well as innovative product development. He is the original founder and an active member on the Board of Managed Maintenance, Inc., a SAAS provider and consulting firm that utilizes their award-winning One-View Portal to help the IT Channel and its customers manage their IT Maintenance.

 

Chris is also the original founder and chief strategist behind one of the original storage cloud providers, Storage Access / BluePoint. During the course of a few short years, he had raised $20M and took that company public on the Toronto Stock Exchange. It has since been acquired by Pomeroy.

 

In 2012, Chris led the acquisition of MessageOps and continued the product development and worldwide launch of its premier SAAS, 365 Command. Built on Microsoft Azure, 365 Command is currently managing over 1 million seats of Microsoft’s Office 365. After achieving this phenomenal milestone, 365 Command and other MessageOps O365 utilities were sold to Kaseya.

 

Over the past 35 years, Chris as worked tirelessly to not only advance his own career, but those of his employees. In addition to leading a $100M organization, Chris can also be found sitting with sales teams, cold calling and coaching, and validating why Champion has been listed on Best Places to Work by both South Florida Business Journal and Computerworld.

Ultimately, the success garnered by Champion Solutions Group, its associated companies, and their employees is due in large part to the leadership of its President and CEO. Perhaps the most fitting award Chris has earned is South Florida Business Journal’s 2013 Ultimate CEO Award.