SBN

Five Approaches for Securing Identity in Cloud Infrastructure

In his recent article for the Cloud Security Alliance, Ermetic co-founder and CEO Shai Morag explained that the migration of business processes to the cloud has become mainstream and organizations are enjoying the many benefits of streamlining processes, cutting costs and creating new ways to work. There are, however, also drawbacks including the fact that tracking people and their access permissions to assets and data is extremely difficult, leaving businesses at risk.

Forrester has said that Cloud Identity Governance (CIG), is a critical factor in advancing enterprise security, allowing security and risk (S&R) professionals to “continuously discover identities, fully map them out, and control them and their access rights in multiple cloud environments.”

In the article, Shai points out the three main problem areas, according to Forrester, and explains that for most organizations, a more manageable and standardized cloud governance framework is in order. According to Shai, a best practice CIG approach should focus on five primary areas:

  • Cloud infrastructure entitlement management (CIEM)
  • Cloud Identity and Access Management (IAM)
  • Multi-factor authentication
  • Privileged Access Management (PAM)
  • Zero Trust Network Access (ZTNA)

Read the full Cloud Security Alliance article.

The post Five Approaches for Securing Identity in Cloud Infrastructure appeared first on Ermetic.

*** This is a Security Bloggers Network syndicated blog from Ermetic authored by Shai Morag. Read the original post at: https://ermetic.com/whats-new/news/five-approaches-for-securing-identity-in-cloud-infrastructure/

Avatar photo

Shai Morag

Shai Morag is the SVP, General Manager Cloud Security at Tenable. He has over 20 years of experience as a security executive and in product management and technology leadership. Shai joined Tenable through the acquisition of Ermetic, where he was the CEO and a co-founder. Before Ermetic, Shai was the co-founder and CEO of Secdo, from inception to a successful acquisition by Palo Alto Networks. Before Secdo, Shai was the CEO of Integrity-Project (acquired by Mellanox (now part of Nvidia))

shai-morag has 10 posts and counting.See all posts by shai-morag