ネットスコープは、2022年Gartner®社のセキュリティ・サービス・エッジ(SSE)のマジック・クアドラントでリーダーの1社と位置付けられました。レポートを読む

  • 製品

    Netskope製品は、NetskopeSecurityCloud上に構築されています。

  • プラットフォーム

    世界最大のセキュリティプライベートクラウドでの比類のない可視性とリアルタイムデータおよび脅威保護。

ネットスコープ、2022年Gartner社のセキュリティ・サービス・エッジ(SSE)のマジック・クアドラントでリーダーの1社と位置付けられる

レポートを読む 製品概要に移動
Netskope Gartner マジック・クアドラント 2022 SSEリーダー

Netskope は、データと脅威の保護、および安全なプライベートアクセスを実現するための機能を統合した、最新のクラウドセキュリティスタックを提供します。

プラットフォームを探索する
大都市の俯瞰図
  • 変身

    デジタルトランスフォーメーションを保護します。

  • セキュリティの近代化

    今日と明日のセキュリティの課題に対応します。

  • フレームワーク

    サイバーセキュリティを形作る規制の枠組みを採用する。

  • 業界ソリューション

    Netskopeは、クラウドに安全に移行するためのプロセスを世界最大規模の企業に提供しています。

最小の遅延と高い信頼性を備えた、市場をリードするクラウドセキュリティサービスに移行します。

詳しくはこちら
Lighted highway through mountainside switchbacks

シングルパスSSEフレームワークを使用して、他のセキュリティソリューションを回避することが多い脅威を防止します。

詳しくはこちら
Lighting storm over metropolitan area

SSEおよびSASE展開のためのゼロトラストソリューション

詳しくはこちら
Boat driving through open sea

Netskopeは、クラウドサービス、アプリ、パブリッククラウドインフラストラクチャを採用するための安全でクラウドスマートかつ迅速な旅を可能にします。

詳しくはこちら
Wind turbines along cliffside
  • お客様の成功事例

    デジタルトランスフォーメーションの旅を保護し、クラウド、Web、およびプライベートアプリケーションを最大限に活用します。

  • カスタマーサポート

    Netskope環境を最適化し、成功を加速するためのプロアクティブなサポートとエンゲージメント。

  • トレーニングと認定

    Netskope training will help you become a cloud security expert.

Netskopeを信頼して、進化する脅威、新しいリスク、テクノロジーの変化、組織とネットワークの変更、および新しい規制要件への対応を支援してください。

詳しくはこちら
Woman smiling with glasses looking out window

クラウドセキュリティ、ネットワーキング、仮想化、コンテンツ配信、ソフトウェア開発のさまざまなバックグラウンドを持つ世界中の資格のあるエンジニアが、タイムリーで高品質の技術支援を提供する準備ができています。

詳しくはこちら Support Portal
Bearded man wearing headset working on computer

Netskopeトレーニングで、デジタルトランスフォーメーションの旅を保護し、クラウド、ウェブ、プライベートアプリケーションを最大限に活用してください。

詳しくはこちら
Group of young professionals working
  • リソース

    クラウドへ安全に移行する上でNetskopeがどのように役立つかについての詳細は、以下をご覧ください。

  • ブログ

    Netskopeがセキュリティサービスエッジ(SSE)を通じてセキュリティとネットワークの変革を可能にする方法を学びましょう。

  • イベント&ワークショップ

    最新のセキュリティトレンドを先取りし、仲間とつながりましょう。

  • 定義されたセキュリティ

    サイバーセキュリティ百科事典で知っておくべきことすべて。

セキュリティビジョナリーポッドキャスト

Episode 11: Empowering People for a Secure Future

ポッドキャストを再生する
Black man sitting in conference meeting

Netskopeがセキュリティサービスエッジ(SSE)機能を介してゼロトラストおよびSASEジャーニーを実現する方法に関する最新情報をお読みください。

ブログを読む
Sunrise and cloudy sky

SASE Week

Netskope is positioned to help you begin your journey and discover where Security, Networking, and Zero Trust fit in the SASE world.

詳しくはこちら
SASE Week

セキュリティサービスエッジとは何ですか?

SASEのセキュリティ面、ネットワークとクラウドでの保護の未来を探ります。

詳しくはこちら
Four-way roundabout
  • 会社概要

    クラウド、データ、ネットワークセキュリティの課題の先取りをサポート

  • ネットスコープが選ばれる理由

    クラウドの変革とどこからでも機能することで、セキュリティの機能方法が変わりました。

  • リーダーシップ

    ネットスコープの経営陣はお客様を成功に導くために全力を尽くしています。

  • パートナー

    私たちはセキュリティリーダーと提携して、クラウドへの旅を保護します。

Netskopeは仕事の未来を可能にします。

詳しくはこちら
Curvy road through wooded area

Netskopeは、組織がゼロトラストの原則を適用してデータを保護できるように、クラウド、データ、およびネットワークのセキュリティを再定義しています。

詳しくはこちら
Switchback road atop a cliffside

思想家、建築家、夢想家、革新者。 一緒に、私たちはお客様がデータと人々を保護するのを助けるために最先端のクラウドセキュリティソリューションを提供します。

当社のチーム紹介
Group of hikers scaling a snowy mountain

Netskopeのパートナー中心の市場開拓戦略により、パートナーは企業のセキュリティを変革しながら、成長と収益性を最大化できます。

詳しくはこちら
Group of diverse young professionals smiling
ブログ CSO, Full Skope 5 Tips for the CISO Looking to Get a Handle on Cloud Security
Oct 20 2021

5 Tips for the CISO Looking to Get a Handle on Cloud Security

Over the last 18 months, cloud application use has skyrocketed, with the average organisation with 500-2,000 employees now using 805 different cloud applications.

This is a staggering level of new risk for CISOs to get their heads around. At the same time that cloud use has grown, so too have the efforts of malicious actors to target cloud applications which are all too often poorly secured and present a constant opportunity of unsecured data to compromise.  

The challenge can feel insurmountable, with employees bringing cloud applications into the organisation through shadow IT faster than we can lock them down one by one, but it doesn’t have to be that way. Here are five tips for CISOs looking to get a handle on cloud security:

1) Partner within the business to build in security by design

With cloud proliferating through the organisation, security teams need to partner closely with IT and ensure that security is never a last-minute consideration. Many organisations are already restructuring and combining teams, in which IT and security sit alongside each other with shared KPIs

For security to be built in ‘by design’ it cannot, by definition, be bolted on, and this is one of the reasons that cloud security requires a cloud-native platform. Most organisations realise the limitations of their appliance-based architectures the minute they try to secure data, applications, and users that sit outside of their perimeter. Security by design takes a data-centric architectural approach, acknowledging that there is no longer a perimeter where users, devices, and data can reside safely. Instead, users, devices and data are now dispersed and move freely – in and out of whichever cloud apps and services the business requires – and these apps and services need security that exists wherever they are.

This approach is often dubbed a Secure Access Service Edge (SASE) strategy; placing security in the cloud, making it integral to IT architecture, and executing in-line controls. By taking this architectural approach to security you don’t have to build and customise new security controls cloud app by cloud app. 

2) Understand your data flows

When you acknowledge that your data is no longer static, but that it moves constantly around third-party cloud services, it becomes very apparent that a CISO needs a much greater understanding of their organisation’s data flows. An organisation should know the movements of its data, have visibility of the categories of data at play, and understand the profile of the cloud application in order to decide what controls are necessary.

A data-centric view of security makes sense when you consider that regulation and risk calculations are commonly data-centric. Visibility and an understanding of your data flows is particularly critical when you are navigating areas such as the shared responsibility model, or assessing supply chain risk. Organisations must undertake continuous security assessments based around their data flows.

3) Get on top of API security

Cloud has made it more pressing than ever before that organisations assess supply chain risk and partner assurances. This links to the previous point about understanding data flows (and knowing exactly where your data resides and what your responsibilities are), but it goes further too—specifically when making the most of the integration and analytics opportunities that come with cloud. 

Cloud integrations are incredibly convenient and can add a lot of value. They tend to be built upon APIs and are very easy to set up. However, legacy security appliances don’t understand APIs. They tend to only understand the language of the web and traditional network protocols and are unable to track or police cloud services. It’s yet another reason why you have to secure the cloud from within the cloud. Having legacy appliances attempting to police the cloud is a bit like having a police force that doesn’t speak the same language as the community it is trying to protect. They are powerless to understand what is happening and therefore ineffectual.

4) Make Zero Trust your default position

With cloud architectures removing the concept of a secure perimeter around an organisation’s data and IT, Zero Trust becomes important. As a CISO it can sometimes feel like the organisation looks to us for confidence and reassurance, but actually to do our job well there is a lot to be said for assuming the stance of high alert and mistrust. Zero Trust Network Access (ZTNA) is exactly that – you do not give anyone, any device, or any cloud service access to anything without a specifically allocated series of authenticated security credentials. Data is too valuable to make assumptions of authenticity.

A ZTNA solution makes an immediate difference to the level of security inherent within a traditional network or cloud architecture and should be considered a key component as organisations further migrate into a cloud-first world. 

5) Raise awareness, and activate the workforce

Information security is something that should be in every employee’s job description. But while we, the experts, have to work so hard to stay on top of new cloud risks and threats, we cannot expect employees to successfully navigate the best efforts of malicious actors without education. 

It only takes one simple error or misconfiguration to passively expose sensitive or regulated data, and malicious actors are working hard to make their traps harder for the average employee to spot. They know how to disguise themselves by replicating familiar branding and login screens of trusted cloud services. They even use the same trusted cloud services in their attack architecture, granting them the familiarity of a friendly URL. Cloud app credentials are a top target for phishing campaigns, with 36% of campaigns in 2020 targeting cloud app credentials, and they do this in pages that are hosted by, and look convincingly like, the authentic corporate instance of the organisation’s own cloud service.

It is our responsibility to equip the workforce to keep data safe, and the traditional take-away message of ‘do not click suspicious links’ is no longer useful. Raising awareness is the first step but the goal needs to be ‘activation’; when people feel accountable and responsible for security – reaching a point where every employee is a member of the security team. 

Just as cloud caused a revolutionary rethink around IT architectures, workflows, and cost centres, so it should do likewise for security. Whether cloud enters the business through major business transformation projects, or through an app downloaded to an unmanaged device, it is not something that security teams can ignore.  A SASE strategy – with strong Zero Trust principles – is the best way to ensure cloud remains a positive force within an organisation, and does not keep you awake at night.

This article was originally published at Digital Bulletin.

author image
About the author
Neil Thacker is a veteran information security professional and a data protection and privacy expert well-versed in the European Union General Data Protection Regulation (EU GDPR).
Neil Thacker is a veteran information security professional and a data protection and privacy expert well-versed in the European Union General Data Protection Regulation (EU GDPR).