クラウドアクセスセキュリティブローカー（CASB）とは

Companies need visibility and control across both managed and unmanaged cloud services. Rather than take an “allow” or “block” stance on all cloud services, cloud brokerage should enable IT to say “yes” to useful services while still governing access to activities and data within services. This could mean offering full access to a sanctioned suite like Microsoft Office 365 to users on corporate devices, but web-only email to users on unmanaged devices. It could also mean enforcing a “no sharing outside of the company” policy across a category of unsanctioned services. While cloud security is the key focus of a cloud access security broker, another value provided is helping you get your arms around cloud spend. A CASB can help you discover all cloud services in use, report on what your cloud spend is, and find redundancies in functionality and license costs. A CASB can produce valuable business and financial information as well as protection.

As organizations move more of their data and systems to the cloud, they must ensure they comply with the many regulations designed to ensure the safety and privacy of personal or corporate data. And with the growth of data usage, regulations are constantly updating. Cloud access security brokers can help ensure compliance in the cloud whether you are a healthcare organization worried about HIPAA or HITECH compliance, a retail company concerned with PCI compliance, or a financial services organization needing to comply with FFIEC and FINRA. A CASB can help safeguard your company against costly data breaches by maintaining the data regulations set by your industry.

Accuracy comes from using highly sophisticated cloud DLP detection mechanisms like document fingerprinting, combined with reducing detection surface area using context (user, location, activity, etc.). When sensitive content is discovered in or en route to the cloud, the cloud access security broker (CASB) should allow IT the option of shuttling suspected violations efficiently to their on-premises systems for further analysis. Deeper research on threat observations aids your company in identifying and stopping malicious activity before it escalates, a CASB can act as a gatekeeper and facilitate this. Expert on both IT needs and business practices, CASBs take a skilled approach to sharpen an organization’s security.

Organizations need to ensure their employees aren’t introducing or propagating cloud malware and threats through vectors such as cloud storage services and their associated sync clients and services. This means being able to scan and remediate threats across internal and external networks, in real-time when an employee tries to share or upload an infected file. This also means detecting and preventing unauthorized user access to cloud services and data, which can help to identify compromised accounts.

A CASB can defend an organization against a host of cloud threats and malware. It’s vital for your company to avoid threats that are capable of combining prioritized static and dynamic malware analysis for advanced threat intelligence. Some threats may originate from—or be further propagated by—cloud services, proper threat protection can be your shield.