| | September - 2023ENTERPRISE SECURITY8IN MY OPINIONIN MY OPINIONBy Alberto Rey, CISO - Global Infrastructure & IT operations, BBVACOMBATING CLOUD-BASED CYBER ATTACKSThe latest developments in the technology services industry, along with a generalized trend of companies to move their investments plans from CAPEX to OPEX, have made a big number of our organizations migrate their infrastructure, platforms, and software solutions to the cloud at a pace never known before, and execute their migration plans in an environment of constant urgency driven by innovation and cost control.This is relevant for companies of all sizes alike (to take my own example, BBVA's cloud infrastructure currently accounts for 40 percent of our total assets with public cloud environments representing over a 20 percent), but it's even more impactful for smaller companies, who many times are willing to get themselves rid from the complexity associated with managing this new set of assets, and many time lack the ability or the resources to invest in appropriate capacitation.That's the environment, and it does not only affect business solutions but also cybersecurity ones. CERT teams all over the world find themselves protecting on-premise assets from the cloud or the other way round while trying to make sure the phenomenally big amounts of data they need to do so are moved and kept in a secure manner, but that's only the lesser part of the challenge.The larger chunk of our problems is neither the set of technologies at our disposal (nowadays mostly cloud native from the log generation to its submission, storage, and analysis) nor our teams (who are absolutely in line with that reality too), so what's the real issue with cloud-based attacks then?Alberto Rey
<
Page 7 |
Page 9 >