閉める
閉める
明日に向けたネットワーク
明日に向けたネットワーク
サポートするアプリケーションとユーザー向けに設計された、より高速で、より安全で、回復力のあるネットワークへの道を計画します。
          Netskopeを体験しませんか?
          Get Hands-on With the Netskope Platform
          Here's your chance to experience the Netskope One single-cloud platform first-hand. Sign up for self-paced, hands-on labs, join us for monthly live product demos, take a free test drive of Netskope Private Access, or join us for a live, instructor-led workshops.
            SSEのリーダー。 現在、シングルベンダーSASEのリーダーです。
            SSEのリーダー。 現在、シングルベンダーSASEのリーダーです。
            Netskope、2024年ガートナー、シングルベンダーSASEのマジック・クアドラントでリーダーの1社の位置付けと評価された理由をご確認ください。
              ダミーのためのジェネレーティブAIの保護
              ダミーのためのジェネレーティブAIの保護
              Learn how your organization can balance the innovative potential of generative AI with robust data security practices.
                Modern data loss prevention (DLP) for Dummies eBook
                最新の情報漏えい対策(DLP)for Dummies
                Get tips and tricks for transitioning to a cloud-delivered DLP.
                  SASEダミーのための最新のSD-WAN ブック
                  Modern SD-WAN for SASE Dummies
                  遊ぶのをやめる ネットワークアーキテクチャに追いつく
                    リスクがどこにあるかを理解する
                    Advanced Analytics transforms the way security operations teams apply data-driven insights to implement better policies. With Advanced Analytics, you can identify trends, zero in on areas of concern and use the data to take action.
                        レガシーVPNを完全に置き換えるための6つの最も説得力のあるユースケース
                        レガシーVPNを完全に置き換えるための6つの最も説得力のあるユースケース
                        Netskope One Private Access is the only solution that allows you to retire your VPN for good.
                          Colgate-Palmoliveは、スマートで適応性のあるデータ保護により「知的財産」を保護します
                          Colgate-Palmoliveは、スマートで適応性のあるデータ保護により「知的財産」を保護します
                            Netskope GovCloud
                            NetskopeがFedRAMPの高認証を達成
                            政府機関の変革を加速するには、Netskope GovCloud を選択してください。
                              Let's Do Great Things Together
                              Netskopeのパートナー中心の市場開拓戦略により、パートナーは企業のセキュリティを変革しながら、成長と収益性を最大化できます。
                                Netskopeソリューション
                                Netskope Cloud Exchange
                                Netskope Cloud Exchange (CE) provides customers with powerful integration tools to leverage investments across their security posture.
                                  Netskopeテクニカルサポート
                                  Netskopeテクニカルサポート
                                  クラウドセキュリティ、ネットワーキング、仮想化、コンテンツ配信、ソフトウェア開発など、多様なバックグラウンドを持つ全世界にいる有資格のサポートエンジニアが、タイムリーで質の高い技術支援を行っています。
                                    Netskopeの動画
                                    Netskopeトレーニング
                                    Netskopeのトレーニングは、クラウドセキュリティのエキスパートになるためのステップアップに活用できます。Netskopeは、お客様のデジタルトランスフォーメーションの取り組みにおける安全確保、そしてクラウド、Web、プライベートアプリケーションを最大限に活用するためのお手伝いをいたします。

                                      The Elephant in the Room. Lessons (we should have already learned) from the GOP Data Leak

                                      Jun 20 2017
                                      Tags
                                      Cloud Data Breach
                                      Cloud Security
                                      Issues and Concerns
                                      Risks
                                      Tools and Tips

                                      Yesterday it was revealed that personally identifiable information (PII) for roughly 61 percent of the US population was leaked by a marketing firm contracted by the Republican National Committee. Were state-sponsored attackers involved? Is this some strange twist to the DNC hack to appear bipartisan? (insert suspenseful crescendo here!)

                                      No. This is a whole lot simpler than that. This is, in fact, as basic as it gets. As it turns out, the marketing firm created a database in Amazon where they stored a ton (roughly 25 terabytes) of super secret stuff. And, as we’ve found out, this server was exposed publicly and they forgot to protect it with a password. Ouch.

                                      As reported by Gizmodo, home addresses, birthdates, phone numbers, and a slew of information about voters’ tendencies when it comes to hot-button issues like gun ownership, stem cell research, abortion, and potentially religious affiliation and ethnicity were exposed.

                                      Something I can’t help but reflect back on is a conversation I had recently with a well-known Gartner analyst covering the CASB space who said, “before I ever start talking with folks about any security tools, CASBs included, I ask them if they’ve got the basics covered, like IAM, proper privileged account precautions, and so on. Because if they can’t look me in the eye and say they’ve got that covered, then what’s the point of going after the emerging stuff? It’s like installing sophisticated surveillance in your home before you make sure your doors have locks.”

                                      I couldn’t agree more.

                                      Of course this isn’t all as cut and dried as I’m making it out to be. Things move fast. The way people work has changed and so has the way that we find, provision, and deprovision the services our people use. I can click two buttons and instantly integrate two cloud services together, and I never lifted a pixel towards my IT department for permission. Everything is “agile” now, and an innocent “test” instance can suddenly become your “production” instance in the blink of an eye. A database in AWS, for example, can suddenly become larger than 25 terabytes and contain data from Karl Rove’s super PAC. Could have easily been Azure or GCP since the average enterprise is using 4 or more IaaS services – but who’s counting. The reality is that somewhere at the end of a very heated call from the RNC is someone who “just forgot,” or “thought it had already been done,” or “didn’t check the permissions/exposure to know the data was exposed.” And yet how many of us would swear up and down that we are absolutely certain our teams would have enough working knowledge of the tools, combined with the right checks and balances to ensure this won’t happen to us? Not many of us, I think.

                                      Of course I’m delighted to work at a place that has ways to help you avoid an embarrassing situation like this. I’m also happy that Netskope has built this in a way that scales with the business, personnel changes, growth, and new challenges. Some of that is purely our technical advantage from a cloud security point of view and you can read more about that in the “Security Evolved” section of our website. In other cases, it’s a blend of the technology and practical knowledge gained through hundreds of CASB deployments. To be more specific, our Cloud Security Triage Process provides a practical approach to governing cloud services in four steps. At a high-level, you need to be able to safely sanction and safely permit certain unsanctioned cloud services with granular controls and handle things at a category level. Imagine if there had been a policy in place that examined permissions / access control for any AWS database being created and then prevented upload of sensitive data from any database exposed to the public without a password. That’d be pretty great, right? If might even make it ok if that elephant forgets a few things every now and then – even some of the basics.

                                       

                                      author image
                                      Netskope Staff
                                      Browse recent articles by Netskope Staff. Discover the latest trends and updates within the cloud and network space.
                                      Browse recent articles by Netskope Staff. Discover the latest trends and updates within the cloud and network space.

                                      Stay informed!

                                      Subscribe for the latest from the Netskope Blog