{"id":57320,"date":"2021-01-29T08:37:18","date_gmt":"2021-01-29T08:37:18","guid":{"rendered":"https:\/\/www.intelligentcio.com\/me\/?p=57320"},"modified":"2021-02-05T10:10:41","modified_gmt":"2021-02-05T10:10:41","slug":"why-organisations-need-an-open-cloud-based-platform-to-build-security-into-their-hybrid-it-environments","status":"publish","type":"post","link":"https:\/\/www.intelligentcio.com\/me\/2021\/01\/29\/why-organisations-need-an-open-cloud-based-platform-to-build-security-into-their-hybrid-it-environments\/","title":{"rendered":"The importance of an open, cloud-based platform for hybrid IT security"},"content":{"rendered":"\n

Philippe Courtot, Chairman and CEO at Qualys, outlines why organisations need an open, cloud-based platform that seamlessly builds security into their hybrid IT environments.<\/em><\/p>\n\n\n\n

Philippe Courtot, Chairman and CEO at Qualys, has provided a clear call to action on how to successfully overcome today\u2019s security challenges, at the QSC EMEA 2021 12-Day Virtual event.<\/p>\n\n\n\n

With enterprise IT environments getting exponentially more complex with the increasing adoption of cloud computing, he explained that the key to attaining seamless security and compliance is to shift to open cloud platforms that interoperate with each other.   <\/p>\n\n\n\n

With this new model allowing organizations to build security natively into their IT infrastructure, and to take a risk-based approach anchored by an always updated global IT asset inventory, he argued that this is the only way to have the scale, speed, accuracy, visibility and context needed to protect today\u2019s hybrid and dynamic IT infrastructures.<\/p>\n\n\n\n

In a world where connected devices are exploding, visibility across all devices (known and unknown) and environments is essential.<\/p>\n\n\n\n

\u201cCreating an accurate inventory or \u2018cartography of your entire hybrid environment\u2019 which is always up-to-date and seamlessly integrated into your security stack, is the foundation for a comprehensive security program,\u201d said Courtot.<\/p>\n\n\n\n

Rethinking security<\/strong><\/p>\n\n\n\n

With drastic changes that the migration to the cloud is bringing to security it\u2019s important to consider what organisations should do to cope with these changes.<\/p>\n\n\n\n

\u201cIt’s very clear that today we must rethink security and that security is at a crossroad. We all know that we have lost the little visibility that we had, especially today in that world where not only do we have to deal with our current competing infrastructure or network centric computing,\u201d said Courtot.<\/p>\n\n\n\n

\u201cAnd now of course, we need to think about the cloud and how we can really create a seamless security or build security across these environments.\u201d<\/p>\n\n\n\n

The problem with traditional solutions<\/strong><\/p>\n\n\n\n

As IT teams embrace cloud services, mobility, containers, DevOps and other innovations, the job of security teams gets harder. This is especially true if they have a heterogeneous stack of tools that are difficult and costly to deploy, integrate and manage.<\/p>\n\n\n\n

With such a siloed and fragmented toolset, visibility into the IT environment narrows, tasks can\u2019t be automated, false positives abound, and security teams struggle to detect and respond quickly to threats.<\/p>\n\n\n\n

Courtot says the traditional best of breed point solutions do not cut it anymore. The main reason for this, he says, is because they are siloed solutions.<\/p>\n\n\n\n

\u201cThey don’t speak with each other and it’s very difficult,\u201d he said. \u201cNone of them is giving us, of course, the visibility that we need.<\/p>\n\n\n\n

\u201cWe also know that for the same reasons, our response is far too slow in a new world where everything is connected with everything at Internet speeds. And it’s also very difficult and hard to automate.\u201d<\/p>\n\n\n\n

Visibility<\/strong><\/p>\n\n\n\n

With the difficulties of having visibility across hybrid environments, Courtot says: \u201cWe simply, as we all know, cannot secure what we do not know or see.\u201d<\/p>\n\n\n\n

He stresses the difficulty of always having an up-to-date global IT asset inventory to provide greater visibility.<\/p>\n\n\n\n

\u201cSo we need not only to assess the security and posture of any device that connects to the network and we need to know that before they connect or at the time they connect,\u201d he said. \u201cThat cannot be done manually. So all of that needs, again, to be automated.<\/p>\n\n\n\n

\u201cBuilding such a global IT asset inventory that is always up to date, that we can call the cartography of your enterprise and ensuring that we capture anything that connects with the network is really the cornerstone of a new security model. We need to build or rethink our security with that in mind.<\/p>\n\n\n\n

\u201cWe need to think about out of the box integration, building them at Internet scale with real time in mind, and ideally you want to have them, maybe not all of them, but actually as much as you can, natively build in that same cloud-based platform.<\/p>\n\n\n\n

\u201cWe always believed since the very beginning, since when we created Qualys, that if you could bring all the telemetry into one place, then you could essentially correlate, analyze that information.\u201d<\/p>\n\n\n\n

Adopting an open cloud platform<\/strong><\/p>\n\n\n\n

With the resistance to cloud migration melting away, companies need to use these new technologies to become more competitive.<\/p>\n\n\n\n

\u201cSo there’s a significant pressure on us to essentially migrate to the cloud, whether we like it or not,\u201d said Courtot.<\/p>\n\n\n\n

\u201cNow in that migration, we need to be very careful of not falling into the same trap that we\u2019ve been falling into before. Yes, best of breed is still very important for the elimination of the false positives, but if we select a cloud offering, which is, in reality, another point solution but essentially built in the cloud, we are not going to solve the problem.<\/p>\n\n\n\n

\u201cWe need to look at solutions that are just more than essentially point solutions.\u201d<\/p>\n\n\n\n

Courtot argues that the best approach is to build a platform that would allow for the acquisition of  more telemetry.<\/p>\n\n\n\n

\u201cSo then you can absolutely create best of breed solutions that eliminate a lot of the false positives and therefore allows you to do automation,\u201d said Courtot.<\/p>\n\n\n\n

\u201cSo the other thing that we need to realize is that our corporate network is shrinking. That is pretty obvious, because now more and more, we’re connecting via the Internet. You go through the cloud, not via your corporate network, but obviously via the Internet. And we saw that very clearly with COVID, which has been a huge toll on many, many industries.\u201d<\/p>\n\n\n\n

Addressing new security challenges<\/strong><\/p>\n\n\n\n

This new security model based on open cloud platforms is at its beginning stages, but it\u2019s one that Qualys has envisioned since it was founded.<\/p>\n\n\n\n

Early on, Qualys realized that the center of the IT universe would shift away from on-premises computing to the Internet, and that security would naturally have to broaden its scope well beyond the corporate network perimeter to the cloud.<\/p>\n\n\n\n

Courtot said: \u201cI don’t think we can continue doing what we’re doing today.<\/p>\n\n\n\n

\u201cWe need to really move to open cloud platforms and open cloud platforms that interoperate with each other.<\/p>\n\n\n\n

\u201cWe believe that when you have that notion of open platform that can collect all that information, that visibility on your network, then you could also now marry that with your business information.<\/p>\n\n\n\n

\u201cToday security is front and center, and as we move to the cloud, we must rethink security.\u201d<\/p>\n","protected":false},"excerpt":{"rendered":"

Philippe Courtot, Chairman and CEO at Qualys, outlines why organisations need an open, cloud-based platform that seamlessly builds security into their hybrid IT environments. Philippe Courtot, Chairman and CEO at Qualys, has provided a clear call to action on how to successfully overcome today\u2019s security challenges, at the QSC EMEA 2021 12-Day Virtual event. With […]<\/p>\n","protected":false},"author":28,"featured_media":57552,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[3624,5,6,9961,13,79],"tags":[22,870,2691,5815,12777,2988],"class_list":["post-57320","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-case-study-newsletter","category-enterprise-security","category-insights","category-thought-leadership","category-top-stories","category-used","tag-cloud","tag-emea","tag-hybrid-it","tag-philippe-courtot","tag-qsc","tag-qualys"],"acf":[],"publishpress_future_workflow_manual_trigger":{"enabledWorkflows":[]},"_links":{"self":[{"href":"https:\/\/www.intelligentcio.com\/me\/wp-json\/wp\/v2\/posts\/57320","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.intelligentcio.com\/me\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.intelligentcio.com\/me\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/me\/wp-json\/wp\/v2\/users\/28"}],"replies":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/me\/wp-json\/wp\/v2\/comments?post=57320"}],"version-history":[{"count":16,"href":"https:\/\/www.intelligentcio.com\/me\/wp-json\/wp\/v2\/posts\/57320\/revisions"}],"predecessor-version":[{"id":57530,"href":"https:\/\/www.intelligentcio.com\/me\/wp-json\/wp\/v2\/posts\/57320\/revisions\/57530"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/me\/wp-json\/wp\/v2\/media\/57552"}],"wp:attachment":[{"href":"https:\/\/www.intelligentcio.com\/me\/wp-json\/wp\/v2\/media?parent=57320"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/me\/wp-json\/wp\/v2\/categories?post=57320"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/me\/wp-json\/wp\/v2\/tags?post=57320"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}