Experience the power of cloud contact management software for Security

How to create outlook signature

caspians are becoming increasingly important and increasingly affordable as an element of your security posture let's take a look at what casby is and what it can do for you and some different ways that you can deploy cosby hi i'm steve murphy i'm a vice president at arg and while i work for arg this video is my own and isn't necessarily a reflection of the views or opinions of my employer this channel is all about helping it leaders make great business decisions so let's take a look at what a casper can do quick outline of our conversation today we're going to explore what a casper is there's a traditional definition of a caspy and then there's my definition of the casbi so we'll look at both we'll look at two different deployment models for a caspy look and evaluate some of the pros and cons and then we'll talk about why adoption of casbis has lagged and what's changed to increase the level of adoption and certainly the level of conversations that we're seeing in the marketplace first and foremost what is a casbi or casb casby stands for cloud application security broker and the traditional definition of a cloud application security broker is an application that sits between your users and the cloud applications that they want to access to enforce policy now traditional cloud access security brokers have a couple of components authentication and authorization of users credential mapping for data within the cloud device profiling so they can determine the context of that device encryption of data logging of activities and alerting when things don't appear normal now i don't like this definition because a lot of people when they read this definition they're going to say i do all that stuff already with the things that i already have the tooling that's already in place why do i need a caspy so i prefer more of a functional definition casbis protects the organization from exposure of unauthorized information in cloud environments it allows people to access those cloud environments but it controls what can be done within those cloud environments and so it's a very unique application that the traditional definition really doesn't convey to that end acme prevents or limits users from unauthorized cloud services and so this means that you can control shadow i.t by preventing your users from accessing unapproved or unsanctioned cloud applications one of the great things that casbis do or provide is a risk score for thousands of different cloud environments and this allows you to customize your approach to every significant cloud environment that you allow your users to access cosby's also contextualized as i mentioned previously the end user and adjust the rules or the governance for those users on the fly so if someone is using their laptop from a unsecured wi-fi for example that casby will recognize that and and reduce potentially the rules that or the the allowances that that user has to access data once they recognize that the user's back at their normal ip address those rules may be relaxed it also provides for compliance purposes a record of cloud interactions now this helps you understand who's accessing what data and for what purposes and then there's a threat protection element to ensure that only the appropriate users are using the cloud services and it understands when unusual activity is being uh is being conducted so it does have a user and entity behavior analytics component to a casby that allows you to block unusual activity there are two deployment models that you'll have to evaluate when you consider a cosby let's take a look at the proxy based deployment model as that's the more historical or the legacy deployment model the one that the industry was founded on so we have the internet and we have a user who wants to access a cloud environment over the internet let's say it's either salesforce or microsoft office 365. that user in a traditional casby model would access the casby platform first generally that's going to be in the cloud today in the past it might have been an on-prem caspy but most of the deployments today are in the cloud so the user is going to access a cloud-based casby and that cathy will act as a proxy to allow a session into both of these cloud environments that proxy service allows the casbi to monitor the traffic in real time as it goes back and forth between those cloud environments and enforce the rules and policies that the organization has put in place well the big drawback of a proxy based model is that you have an application sitting between you and the environment that the end user is trying to access that can cause delays and experience issues so to address the delays in the traditional model the industry has developed an api based cosby now we still have our internet uh cloud and our user trying to access these um these cloud environments but the cosby's here actually sit in line with the cloud environments as an api functionality so the user's accessing the cloud environment directly with just a pass-through through the api or through the cosby's api now when suspicious traffic happens or says or um something that needs further analysis happens those casbi apis will signal back to the production based platform the casby platform and the challenge here is that this is not in real time this might take a few seconds for a an analysis to occur determine whether or not the traffic is allowable so this doesn't have the same security level the real-time security level as a proxy based casbi but the end user experience is superior now one of the alternatives if you use a casper that offers both models and you can use both models selectively within your environment you might choose the standard business cloud environments as an api model and use the more consumer-based cloud environments let's say a dropbox account or gmail account and so forth within a proxy service where the customer experience impact may not be as noticeable and the risk associated with those cloud environments is higher and you want that real time inspection so that may be one way that you can determine how to incorporate casbis into your organization getting the best of both deployment models so on this next slide a little tongue-in-cheek i think casbis are one of the funner cyber security platforms that an organization can consider and what do i mean by fun well first of all non-technical people understand caspia's so it's easier to explain to casby to your management team for example and get that funding or the project approved then it might be to explain another cyber security solution like a secure web gateway or or remote browser services and so forth casbis have a real and understandable benefit in terms of preventing people from uploading inappropriate information into public cloud services it's also one of the more interactive platforms from a cyber security perspective you'll be constantly adjusting your caspy for various situations now some people might call this work and it is work to a degree but it also allows you to continue to to freshen your casbi rule set your policies and make sure that they're appropriately addressing the needs of the organization rather than a set it and forget it type of environment and one of the reasons why you're going to interact with the kaspe so much is that you'll be driving interaction with uh with the business it will be working with the business users to determine what's the appropriate access level for various applications you'll help identify friction within the it environment because people will want to do things that the casper won't let them do and then you'll help them evaluate whether or not there's a an appropriate way of getting that goal accomplished or whether or not you need to make an adjustment within the cosby to allow that type of service so in this regard it becomes a problem solver and i've already mentioned that a cosby can prevent shadow i.t by preventing organizations and end users from instituting new cloud services without i.t being involved so with all these benefits why haven't casbis really caught on well my humble opinion the real issue with the casbi is historically they've been extremely expensive something that only the largest organizations could afford now covet is changing the understanding of the value proposition of casbis so the cost structure is becoming more rationalized because of so many people working from home outside of the traditional cyber security environment and if and you can understand the cost structure or the reason for the high cost for caspy if you understand what they do there's a ton of real-time development that happens within casbis on an ongoing basis just to keep up with the thousands of cloud applications that they support but that doesn't mean that cost has to be an inhibitor there are individual cosby solutions that do not provide all the feature functionality of the top tier performers or the top rated tasby platforms in the industry and also the individual cosby providers generally have a sliding scale or a menu driven service where you can pick the technology that fits your business so understanding your use cases can help you lower your cost structure significantly and as i said there are affordable alternatives there are new market entrants coming into the casbie environment from other services like the secure web gateway providers for example that have different models if you're interested in caspi and want to continue this conversation feel free to reach out to me my contact information is in the description of this video and if you got some value from this video i'd appreciate a thumbs up thanks very much for doing that in advance that helps other people access this content and if you want to find your way back to this channel the best way of doing that is by hitting that subscribe button that will put my video in your feed and you can come back at your convenience thanks very much for your time and i hope you have a great day