{"id":37427,"date":"2021-02-22T11:06:00","date_gmt":"2021-02-22T11:06:00","guid":{"rendered":"https:\/\/www.intelligentcio.com\/africa\/?p=37427"},"modified":"2021-03-02T10:49:37","modified_gmt":"2021-03-02T10:49:37","slug":"qsc-emea-21-building-a-security-strategy-for-a-multi-cloud-world","status":"publish","type":"post","link":"https:\/\/www.intelligentcio.com\/africa\/2021\/02\/22\/qsc-emea-21-building-a-security-strategy-for-a-multi-cloud-world\/","title":{"rendered":"QSC EMEA ’21: ‘Building a security strategy for a multi-cloud world’"},"content":{"rendered":"\n

Modern CISOs face more challenges than ever before with a constantly evolving threat landscape, regulations to comply with and management of an increasingly digitalised infrastructure. In a customer round table at the Qualys Security Conference EMEA \u201921 Virtual Event, Guiseppe Brizio, CISO EMEA, Qualys, heard about the key challenges for modern CISOs in the fast-emerging multi-cloud world.<\/em><\/p>\n\n\n\n

\"\"
Guiseppe Brizio, CISO EMEA, Qualys<\/strong><\/figcaption><\/figure><\/div>\n\n\n\n

Digital Transformation has been on the agenda of many enterprises for some time but the arrival of COVID-19 meant CIOs, who had been fine-tuning their strategies, were suddenly forced to accelerate their pivot to digitalisation. <\/p>\n\n\n\n

As lockdowns were introduced across many parts of EMEA, organisations quickly scrambled to mobilise remote workforces and implement the ICT infrastructure that would enable Business Continuity no matter where employees were based.<\/p>\n\n\n\n

\u2018Digital\u2019 became both the destination and the means of getting there, with cloud, and public cloud, a key enabler of this.<\/p>\n\n\n\n

According to predictions from International Data Corporation (IDC), 65% of the world’s GDP is set to be digitalised by 2022 and direct Digital Transformation (DX) investments are to total US$6.8 trillion between 2020 and 2023.<\/p>\n\n\n\n

The market intelligence firm cited the \u2018myriad business challenges\u2019 presented by the COVID-19 pandemic as having ensured that the global economy remains firmly on course for its \u2018digital destiny\u2019.<\/p>\n\n\n\n

And according to IDC<\/a>\u2019s Worldwide Quarterly Cloud IT Infrastructure Tracker<\/em><\/a>, spending on public cloud IT infrastructure increased 13.1% year over year in Q320, reaching US$13.3 billion.<\/p>\n\n\n\n

This adoption of public cloud \u2013 and the benefits of it \u2013 were highlighted by C-level end users in a customer round table at Qualys\u2019 recent QSC EMEA’21 Virtual Event.<\/p>\n\n\n\n

The panel was asked to discuss their strategic positioning towards the public cloud, with participants highlighting the opportunities this will provide, as well as security considerations arising.<\/p>\n\n\n\n

Bruno Laurent, Cyber Defense Head, AXA<\/a>, said using SaaS and PaaS solutions has enabled capacity for the business to digitally accelerate. The benefits that can be unlocked when solution providers deliver innovation is also \u2018instantaneous\u2019.<\/p>\n\n\n\n

Cloud, \u2018done right\u2019, was also highlighted as a business growth enabler by Jared Carstensen, CISO, CRH.<\/p>\n\n\n\n

He said: \u201c<\/strong>I think for me, personally, cloud done right takes you to the next level in terms of where you can go as a business. I think it can remove so many barriers and act as so many levers that you can start to pull such as speed, efficiency, metrics, management, oversight.\u201d<\/p>\n\n\n\n

Sumedh Thakar, Interim CEO and Chief Product Officer, told panelists that cloud is \u2018more about the architecture\u2019.<\/p>\n\n\n\n

He highlighted that Qualys itself had been able to significantly expand from having a single solution to having multiple different capabilities on the single platform in the last couple of years.<\/p>\n\n\n\n

This is an area which is also benefiting security, he said, adding: \u201cCloud does offer an opportunity where you can go to one platform and be able to leverage all of the things that you need for your security and not have to buy 50 different solutions and vendors and put them together.\u201d<\/p>\n\n\n\n

Key cloud security challenges and how they\u2019re being addressed<\/strong><\/p>\n\n\n\n

Today\u2019s CISOs don\u2019t have an easy job as they navigate an ever-evolving threat landscape while ensuring compliance with industry regulations and enabling Digital Transformation.<\/p>\n\n\n\n

Panelists were asked to outline the top three key challenges facing them and how these are being addressed.<\/p>\n\n\n\n

Alain Simon, Corporate VP\/CISO, Amadeus, highlighted the challenge of adapting to the rapidly changing threat landscape.<\/p>\n\n\n\n

\u201cFast detection is going to be key in the coming years, I believe. And really dealing with the amount of events and making sure that we have an effective triage when we do threat intelligence and so on, is going to be key as well,\u201d he said, adding that compliance was the second key challenge and, finally, cloud.<\/p>\n\n\n\n

\u201cWe need to make sure that the products that we are using today are actually compatible with different cloud providers and that we will be able to actually get at least the same or better results as we have today in our data centre.\u201d<\/p>\n\n\n\n

Bruno Laurent, Cyber Defense Head, AXA, added that organisations now have a \u2018hybrid world\u2019 to manage.<\/p>\n\n\n\n

Qualys\u2019 Philippe Courtot, Chairman & CEO, Qualys, highlighted that vendors need to be ready for the change which is on the way as we enter the \u2018new cloud world\u2019.<\/p>\n\n\n\n

\u201cFirst, you cannot secure what you don’t know. Today, very few companies have a view of their entire IT assets. Are they managing them, are they end of life? So that’s something that at Qualys we have been working really hard at solving,\u201d he said.<\/p>\n\n\n\n

\u201cThe second problem is the problem of the applications themselves. What I call the soft belly of security is all these web applications that we have. And of course, that needs to be really secure.\u201d<\/p>\n\n\n\n

Finally, he added, was the \u2018shift left\u2019 being observed. Whether organisations use the public or private cloud, there must be a sense that whatever is built will have \u2018minimum vulnerabilities\u2019.<\/p>\n\n\n\n

\u201cEvery vendor needs to be really ready to realise that the change is in front of us \u2013 and those who rise to the challenge will survive.\u201d<\/p>\n\n\n\n