Welcome!

SDN Journal Authors: Liz McMillan, Yeshim Deniz, Elizabeth White, Pat Romanski, TJ Randall

Related Topics: @CloudExpo, Microservices Expo, Containers Expo Blog, Agile Computing, @DXWorldExpo, SDN Journal

@CloudExpo: Article

CSOs: Are You a Groundhog or a Giraffe?

Having control over security and other cloud parameters makes it easier to deal with the integrations when they take place

Through a great deal of research on enterprise cloud adoption and security, I've learned something telling. As you would expect, CISOs' opinions about cloud strategy are quite varied. While many folks recognize their company's use of SaaS for HR, sales, communication, and other applications, they are fairly divided about the use of Infrastructure as a Service (IaaS) and how secure these environments are in keeping company data safeguarded. After many talks with these technology leaders, I've determined that each fall into three distinct categories.

The "Server Huggers"
The first group is the server huggers and they make up a very small percentage of the respondents. They simply have no reason to leverage IaaS. Their applications are very resource intensive and expensive, and their businesses are highly predictable, so the need for scalable capacity just doesn't exist. However, the time may come where they have company needs to bring the cloud into the mix. If so, they should be well informed on how to take advantage of cloud services and realize the ways to protect data during and after that migration.

The Groundhogs
These guys burrow into the ground and resist the changes taking place on the surface. The majority of CSOs take this stance that the cloud is inherently insecure, and their general reaction is: "I'm not putting my data up there!" Despite all the benefits and the huge number of reports available today, they remain hesitant. The reality is that they know the business units are doing it, especially for temporary projects or for collaboration and file sharing. The obvious challenge to the CSO is that it's hard enough to secure networks you know... much less those that you don't. Thus, means must be put in place to keep a close eye on keys and monitor where the data resides and who has access. Those factors alone establish peace of mind and ease the uncertainly during the transition.

The Giraffes
Finally, the third group is those that see beyond the rest of us. They are aggressive and ready to embrace the cloud challenges of today. This small percentage of CSOs are taking the reins and recognizing that business unit leaders are going to do what they need to in order to accomplish their goals. They recognize that the business must take precedence, and they want to be enablers, rather than restrictors, of innovation. These leaders view the cloud as just another network, with different parameters, to accomplish goals, and define security policies to make sure their organizations use the cloud with the best possible security postures available.

Having control over security and other cloud parameters makes it easier to deal with the integrations when they take place. In general, education and understanding the cloud and its effects as it relates to security is key to a smooth and confident transition and aftereffect once it becomes the company norm.

More Stories By Steve Pate

Steve Pate is CTO & Co-Founder of HighCloud Security, bringing 25 years of designing, building, and delivering file system, operating system, and security technologies, with a proven history of converting market-changing ideas into enterprise-ready products. Before HighCloud Security, he built and led teams at ICL, SCO, VERITAS, HyTrust, Vormetric, and others. HighCloud’s resident author, he has published two well-respected books on UNIX kernel internals and UNIX file systems, as well as hundreds of articles and blogs. He has also published two books, on UNIX kernel internals and UNIX filesystems.

Comments (0)

Share your thoughts on this story.

Add your comment
You must be signed in to add a comment. Sign-in | Register

In accordance with our Comment Policy, we encourage comments that are on topic, relevant and to-the-point. We will remove comments that include profanity, personal attacks, racial slurs, threats of violence, or other inappropriate material that violates our Terms and Conditions, and will block users who make repeated violations. We ask all readers to expect diversity of opinion and to treat one another with dignity and respect.


CloudEXPO Stories
Founded in 2002 and headquartered in Chicago, Nexum® takes a comprehensive approach to security. Nexum approaches business with one simple statement: “Do what’s right for the customer and success will follow.” Nexum helps you mitigate risks, protect your data, increase business continuity and meet your unique business objectives by: Detecting and preventing network threats, intrusions and disruptions Equipping you with the information, tools, training and resources you need to effectively manage IT risk Nexum, Latin for an arrangement by which one pledged one’s very liberty as security, Nexum is committed to ensuring your security. At Nexum, We Mean Security®.
The Transparent Cloud-computing Consortium (T-Cloud) is a neutral organization for researching new computing models and business opportunities in IoT era. In his session, Ikuo Nakagawa, Co-Founder and Board Member at Transparent Cloud Computing Consortium, will introduce the big change toward the "connected-economy" in the digital age. He'll introduce and describe some leading-edge business cases from his original points of view, and discuss models & strategies in the connected-economy. Nowadays, "digital innovation" is a big wave of business transformation based on digital technologies. IoT, Big Data, AI, FinTech and various leading-edge technologies are key components of such business drivers.
Doug was appointed CEO of Big Switch in 2013 to lead the company on its mission to provide modern cloud and data center networking solutions capable of disrupting the stronghold by legacy vendors. Under his guidance, Big Switch has experienced 30+% average QoQ growth for the last 16 quarters; more than quadrupled headcount; successfully shifted to a software-only and subscription-based recurring revenue model; solidified key partnerships with Accton/Edgecore, Dell EMC, HPE, Nutanix, RedHat and VMware; developed Open Network Linux, an open source NOS foundational component designed in partnership with Facebook and Google; and he played an integral role in raising two-thirds of the company's $120MM of funding. Prior to Big Switch, Doug was SVP & GM of Juniper Networks $1BN business across Asia-Pacific, Japan and Greater China, and he began his time at Juniper as SVP & GM of its Security bu...
Having been in the web hosting industry since 2002, dhosting has gained a great deal of experience while working on a wide range of projects. This experience has enabled the company to develop our amazing new product, which they are now excited to present! Among dHosting's greatest achievements, they can include the development of their own hosting panel, the building of their fully redundant server system, and the creation of dhHosting's unique product, Dynamic Edge.
Digital transformation is about embracing digital technologies into a company's culture to better connect with its customers, automate processes, create better tools, enter new markets, etc. Such a transformation requires continuous orchestration across teams and an environment based on open collaboration and daily experiments. In his session at 21st Cloud Expo, Alex Casalboni, Technical (Cloud) Evangelist at Cloud Academy, explored and discussed the most urgent unsolved challenges to achieve full cloud literacy in the enterprise world.