Securing a cloud environment is complex and fragmented
The cloud has changed the cybersecurity landscape, immeasurably. No longer does an organisation have a very well understood perimeter, well-protected and patrolled – the cloud has changed that. Securing a cloud environment is complex and fragmented. Security being provided by a myriad of specific tools designed for only a small part of the security challenge – resulting in tech fatigue and alert-overload.
The industry has been desperate for a new approach, a more holistic and complete approach – step forward the Cloud Native Application Protection Platform – CNAPP.
Being able to monitor on-premises equipment with a watchful eye meant that the move to cloud has caught out many IT teams. Lured by the possibilities provided by cloud infrastructure , it was assumed security would be as robust as the known quantity that was on-prem, unfortunately this is not always the case: A Tenable survey of 600 global security professionals found that 95% of respondents had a cloud breach within the previous 18 months, typically driven by the risk associated with cloud characteristics - organisational silo’s, lack of data hygiene and a reactive rather than preventative cybersecurity posture.
The challenge facing cloud users is that the shared responsibility security posture of the providers in fact means the onus for security falls with the customer, not the provider – the provider is responsible for “security of the cloud” but the customer is responsible for “security in the cloud”, making the customer responsible for the overwhelming majority of the security risk.
So, as cloud services expand and users cherry pick to suit needs, most now have a heterogenous cloud structure: from providers that don’t talk to each other. All of this has given rise to the need for third-party security that includes the entire cloud native application rather than the infrastructure layer alone. The end result: an evolution from cloud security posture management (CSPM) to CNAPPs.
What is a CNAPP?
- CNAPP’s [insert link to ebook “Empower your cloud”] allow organisations to monitor the health of cloud native applications as a whole, rather than individually monitoring cloud infrastructure and application security, providing coverage of a wide variety of essential capabilities:
- Cloud Security Posture Management (CSPM)
- Cloud Infrastructure Entitlement Management (CIEM)
- Cloud Workload Protection (CWP)
- Kubernetes Security Posture Management (KSPM)
- Infrastructure as Code (IaC) Scanning
- Cloud Detection and Response (CDR)
- Data Security Posture Management (DSPM)
A CNAPP, such as Tenable Cloud Security, touches many different teams: DevOps, DevSecOps, IAM teams can all use a CNAPP to work collaboratively and continuously improve cloud security posture, providing several cybersecurity benefits in visibility, enhanced and consistent security posture, minimal overload and seamless integration.
How does a CNAPP work?
A CNAPP offers a holistic view of cloud risk and gives the visibility, actionable findings and contextual alerts an organisation needs for comprehensive protection and an improved security posture of cloud native applications. Functioning continuously, seamlessly, and from a single point of access, a CNAPP understands the relationships and connections for all human and service identities, delivering on its promise of finding and remediating risks at scale.
To learn more about how you can simplify your security demands and empower your cloud with CNAPP, download this eBook.
About Tenable
Tenable® is the exposure management company, exposing and closing the cybersecurity gaps that erode business value, reputation and trust. The company’s AI-powered exposure management platform radically unifies security visibility, insight and action across the attack surface, equipping modern organizations to protect against attacks from IT infrastructure to cloud environments to critical infrastructure and everywhere in between. By protecting enterprises from security exposure, Tenable reduces business risk for more than 44,000 customers around the globe. Learn more at www.tenable.com