Data Loss Prevention for Cloud Services
Control what sensitive data flies away to the cloud (iCloud, Dropbox, Google Drive etc.)
Why is the cloud creating so much security buzz?
Cloud computing offers many advantages for both personal and enterprise use. Cloud services and cloud file storing and synchronizing are expanding in enterprise working environments because they allow unlimited storage of files with a simple click of a button. The easy access from employees’ computers, smartphones or tablets is another factor that makes cloud applications so popular.
But there are also concerns and data security vulnerabilities that need to be addressed when it comes to cloud services use. Cloud apps allow instant sharing of any data and sensitive content to third parties. Without proper measures, company’s most valuable data can end up in the wrong hands. They also enable storing of unencrypted sensitive data and once data is there, it is difficult to trace and detect data leakage. What is relatively new is the emergence of Shadow IT which means that cloud apps and services are outside the IT departments' control, even though they are aware of their use.
This is how a grey area appears: employees use these apps because they are convenient and they are already familiar with them from their personal use, but they do not report it to IT or if they do, the IT department does not have the tools to control their use, without prohibiting them completely. Studies show that only 7 percent of companies that block cloud apps also know which shadow IT cloud apps are in use at their organization*.
Shadow IT is a threat that will increase with the development of more and more cloud applications and so is the virtual storage concept which is here to stay and it has become the main IT security challenge.
* Source: Cloud Security Alliance
How DLP for Cloud Services Works
Main Benefits
Cloud apps and file sharing services are extremely common in today's work environments due to the ease of use, convenience and fast collaboration. Banning the acces to these apps would affect employees' productivity. To avoid this but also make sure data is secured, you have the option to monitor and block specific data transfers to specific applications.
Shadow IT is a major concern for IT departments. With the use of Data Loss Prevention solutions, IT departments do not have to restrict access to apps as all sensitive data transfers can be monitored and blocked. IT departments have the tool to enforce data security restrictions, without compromising productivity.
With the available filters, whitelists and blacklists, IT Administrators can prevent sensitive data ending up in the cloud, without blocking the transfer of non-critical data that interrupts employees' work.
Audits are an important part of the data security plan. Knowing at all times users' activity related to data transfers can stop data breaches and ensure business continuity.