Michael Johnson, CISO of Novi, discusses the safety of sensitive data in the public cloud vs on-prem. Topics include the advantages of the public cloud, debunking cloud security myths, pros and cons of on-prem and public cloud solutions, leveraging unique talents in the cloud, transitioning to the cloud and benefits of confidential computing.
Moving to the cloud requires a distinct set of talent and capabilities, and the choice between the cloud and on-premise depends on understanding the threats, capabilities, and context of one's business.
Cloud environments offer reduced attack surfaces, seamlessly integrated monitoring, and improved data protections, providing measurable security advantages.
Deep dives
Cloud vs. On-Premise: The Debate Continues
The debate between the security of the public cloud and on-premise environments continues. Many respondents in a poll leaned towards the public cloud as the easier option to keep secure. However, there were still those who favored on-premise solutions. The debate evolves with the development of the cloud, and the choice between the two depends on business context and capabilities. While the cloud offers benefits like reduced technical debt and easily accessible controls, it requires a different set of skills and maturity to ensure security. It also provides advantages like constant hardware refreshes, automated patches, dynamic attack surface, and scalability. The cloud is audited regularly, making compliance easier. Nonetheless, it's crucial to address the unique challenges and invest in necessary talent and resources for successful cloud migration.
The Cloud's Security Advantages
Moving to the cloud can provide measurable security advantages. Cloud environments offer reduced attack surfaces, seamlessly integrated monitoring, and improved data protections. The cloud is designed to be resilient to modern threats. It also provides benefits like constant hardware refreshes, fast deployment, automated patches, dynamic attack surfaces, spread out attack services, and scalability. Confidential computing capabilities come built-in with major cloud service providers, creating a security perimeter around applications without additional changes. Cloud providers' services and continuous innovation offer speed to market and operational excellence. Leveraging these advantages contributes to increased safety.
Considerations for Cloud Adoption
Transitioning to the cloud requires a distinct set of talent and capabilities. On-premise and cloud environments are not interchangeable. The choice between the two depends on understanding the threats, capabilities, and context of one's business. Highly regulated industries benefit from the cloud, leveraging easily accessible controls and compliance attestation. The cloud's automation and control options require maturity and skill to be fully effective. Technical debt reduction, fresh starts, and cryptography-driven data destruction are additional benefits of cloud adoption. Although mistakes can be made at scale in the cloud, leveraging talent, best practices, and vendor support helps mitigate risks and provides new opportunities for better security.
Anjuna Confidential Cloud software effortlessly enables enterprises to safely run even their most sensitive workloads in the public cloud. Unlike complex perimeter security solutions easily breached by insiders and malicious code, Anjuna leverages the strongest secure computing technologies available to make the public cloud the most secure computing resource anywhere.
In this episode:
Which is safer for sensitive data: public cloud or on-prem?
Is it the technology, the people or the process that makes the difference?
Who is most affected by the public/on-prem decision?
Where does technical debt fit into this?
Remember Everything You Learn from Podcasts
Save insights instantly, chat with episodes, and build lasting knowledge - all powered by AI.
