It’s a big world out there, and cybercriminals know you don’t have time for everything. A common fallacy is that they’re lurking in dark basements, bending their brands to maximum capacity to create highly sophisticated exploits that blow any current security system out of the water. More often than not, they’re not.Criminal hackers go after the low...

CPRA enforcement is only months away, so here’s everything that organizations need to know about how it differs from the CCPA, how CCPA compliance will be different moving forward, and whether or not the changes will apply to your organization.

Financial services companies will have to retool their cybersecurity policies when the new version of NYDFS Cybersecurity Regulation, including a core risk assessment requirement, goes live.

The proliferation of cloud computing has heightened the need for organizations to monitor and manage the safe use of cloud services. Cloud access security brokers, or CASBs, provide the necessary security features to protect cloud-based resources as they’re accessed while also detecting threats and controlling data that flows through the cloud. What Are the 4 Pillars of Cloud Access Security Brokers (CASBs)? A cloud access security broker is either an on-premise or cloud-hosted software strategically placed between the service consumers and the cloud service providers. Its primary role is to enforce security policies with features like malware detection, encryption, authentication, credential mapping, tokenization, and regulatory compliance. In essence, a CASB is an added layer of security that acts like a firewall. It also enables organizations to extend the reach of their security controls beyond network boundaries. Consequently, this empowers CISO/CIOs to protect mission-critical data in their enterprise, like intellectual property (IP), personally identifiable information (PII), and comply with payment card industry (PCI) standards. To accomplish this, a CASB is based on foundational building blocks, such as the following: 1. Data Security With its on-demand computing, the cloud has boosted data movement and collaboration at a distance. However, this seamless interaction with data has made it more vulnerable, especially when it exits outside the network perimeter. This widened attack surface comes at a considerable cost to businesses that must protect sensitive data such as customer information, intellectual property, and trade secrets. To strengthen data security, a CASB is equipped with sophisticated tools to minimize the risk of costly leaks. These typically encompass a range of data protection and monitoring tools, including cloud data loss prevention (DLP) mechanisms, to protect sensitive data and battle shadow IT. In the CASB arsenal, other tools to prevent data leaks include encryption mechanisms, information rights management, authentication & authorization, access control, and tokenization. 2. Visibility Visibility is paramount if organizations are going to identify and protect sensitive data, whether it’s at rest or in motion. The visibility challenge that enterprises typically struggle with is the specter of having too many employees across multiple cloud environments juggling data at various endpoints. Having a CASB enables organizations to discover all their data in use, pinpoint shadow IT, scope redundancies, evaluate license costs, and provide reports on cloud expenditures. As a result, the capabilities of a CASB can equip organizations with visibility to observe how sensitive data travels, whether in the cloud, to and from the cloud, or from cloud-to-cloud environments. 3. Compliance The importance of data and its mass migration to the cloud has underscored the need for robust personal privacy protections. With the raft of regulatory laws around securing PII passed in recent years, enterprises increasingly face complex security enforcement demands. Aside from regulations with an international scope like the General Data Protection Regulation (GDPR), enterprises in different business verticals need to monitor their compliance with laws governing their respective industry. Fortunately, CASBs are equipped for such versatility, ensuring that healthcare providers can comply with the Health Information Technology for Economic and Clinical Health (HITECH) Act and the Health Insurance Portability and Accountability Act (HIPAA); financial service organizations are in line with the Federal Financial Institutions Examination Council (FFIEC) and the Financial Industry Regulatory Authority (FINRA) and retailers are aligned with Payment Card Industry Data Security Standard (PCI DSS) compliance. Traditional security systems are usually insufficient to monitor enforcement between users and cloud-based systems, especially across multiple locations and devices. Having a CASB in place helps facilitate cloud governance and risk assessment by providing security teams with the appropriate guidance on resolving multiple risk areas. 4. Threat Protection With how fast data is passed through cloud-based services, organizations must proactively identify and isolate threats. Fortunately, today’s CASBs are equipped with cutting-edge technology that enables them to evolve continuously in their ability to detect anomalous behavior. Powered by intelligent automation tools and AI in the form of machine learning, CASBs can help thwart zero-day threats, ransomware, and advanced persistent threats. They can also integrate the principle of least privilege (POLP) controls to prevent attackers who have breached the network from moving laterally to access sensitive data. How Does a CASB Work? The main goal of a CASB is to secure data flowing through an organization’s IT infrastructure, both on public cloud vendors and on-premise environments. To achieve this, CASBs primarily use a three-part process: Discovery: As the name implies, discovery seeks to unearth and pinpoint all cloud applications, especially third-party services, automatically. CASBs can identify apps as well as the employees affiliated with them. Classification: CASBs use data classification to identify and prioritize data, evaluate each cloud application, and determine its security risk levels. Classification also facilitates the understanding of how an application is used, the kind of data it consumes, and how it is shared within the app. Remediation: CASBs don’t stop at identifying threats; they can also mitigate vulnerabilities after discovering the risk levels encountered in cloud services. Consequently, CASBs can leverage this information to create tailored policies to address the organization’s security requirements. They can take action automatically to fix any security violations according to policy. The Main Use Cases of CASBs While CASBs provide many security benefits, their main use case is safeguarding proprietary data like trade secrets and intellectual property in third-party, external-facing media like public cloud environments. In addition, CASBs also bridge the gap between capabilities not found in traditional firewalls and secure web gateways (SWGs). Here are the common use cases associated with having a CASB: Protect against cybersecurity threats: CASBs employ mechanisms such as continuous monitoring, threat intelligence gathering, and anomaly detection to fight against malware, ransomware, and advanced persistent threats. Threat prevention and activity monitoring: By leveraging user and entity behavior analytics, CASBs can establish a baseline of expected behavior and flag any deviation while establishing granular control of cloud usage. Boosting risk visibility: CASBs can identify high-risk vulnerabilities and accurately assess risk contextually, subsequently setting appropriate mitigation policies. Shadow IT assessment and management: CASBs offer much-needed insight into sanctioned and unsanctioned applications. Having visibility into cloud services can help uncover rogue applications while delivering a comprehensive picture of your risk profile and any security measures in place. Data loss prevention: CASBs can prevent data leakage and unauthorized access to sensitive data like proprietary information, in addition to financial, health, social security, and credit card numbers. This involves using robust user verification to control cloud-native resources, especially during collaboration and sharing, while blocking shared document downloads. Maintaining regulatory compliance: With tools like encryption, key management, and DLP, CASBs can provide sufficient protection to handle problems related to local laws and data residency – the physical or geographic location of an organization’s data or information. This can help your organization meet regulatory requirements. As a result, data is safeguarded throughout its lifecycle while meeting compliance. Configuration auditing: Improper cloud configurations can create systemic risks for organizations. Unfortunately, most cybersecurity misconfigurations are self-inflicted. A recent Gartner report pointed out that 99% of cloud security failures are due to the customer. Configuration auditing with a CASB allows you to spot improper cloud misconfigurations, default passwords, and easily compromised settings. Adaptive access control: CASBs provide flexible and contextual cloud-based access control, whether to enforce location-based or endpoint policies. How Can Fortra Secure Collaboration Help Me with a CASB? Fortra Secure Collaboration has extensive expertise working with CASBs to protect sensitive data. Fortra Secure Collaboration’s capabilities are bolstered by a data-centric security model based on rights management and DLP. Learn more about cloud-based access security brokers and how we can extend file protection in the cloud.

Last year, Renee and her team introduced a new partner program and led partners through the rebrand to Fortra. Here's her take on these achievements and a look at the strategic shifts that will be required for cybersecurity moving forward.

Learn about 50 different types of data encryption algorithms and their unique advantages in the context of data protection.

Organizations use various types of data security controls, along with their corresponding implementation methods, to safeguard their digital assets. This article delves into the main types of data security controls, their associated technologies, and how to implement them for maximum impact.

There's no shortage of data that can be classified. To help you build an effective data classification policy, we look at 50 different examples of data classification.

A recently approved rule on cyber incident notification will impact how credit unions communicate reportable incidents like data breaches.

In a recent penetration test, the Fortra team was able to harvest enough credentials from a customer to know a savvy threat actor could take down their domain. Discover why testing your organization’s defenses is essential to offensive security.

Although data leakage doesn’t pose the same danger as data breaches, it can still threaten organizations. Since any unauthorized transmission of data is a security violation, it is imperative organizations protect their data with data protection software like Data Loss Prevention (DLP). What Is Data Leakage? Data leakage is when data or information is accidentally exposed, disclosed, or divulged to those without authorization to access it. As opposed to data breaches that occur due to compromise from an external source, data leakage originates internally. Unlike data breaches, data leakage isn’t always due to nefarious intent. For example, it can occur in machine learning algorithms while developing predictive models. While data leakages occur accidentally or due to carelessness, they are viewed as a security flaw or violation. This is because the area from which data escapes is typically a secured network perimeter, which ought to have the wherewithal to prevent it in the first place. However, criminals can take advantage of a data leak by exploiting it to launch more pernicious, larger-scale attacks. So, while a data leakage might have innocuous origins, its impact can be devastating in the form of identity theft, ransomware propagation, and providing a pathway to data breaches. What Are the Causes of a Data Leak? Data leaks are due to various reasons, such as the following: Poor data security Without employing standard security best practices, an organization increases its chances of experiencing data leakage. They include not properly vetting third-party applications, which can expose the company to supply-chain attacks. Recycled Passwords The underlying root cause of recycled passwords are organizations that maintain poor password policies. This is also facilitated by the fact that users have to juggle an array of apps in this digital age. Left to their own devices, users reuse the same password for multiple accounts they have to log into, including corporate ones. This increases the possibility of a data leak that exposes these passwords. Hackers and malicious actors can leverage this to launch credential-stuffing attacks to compromise several corporate accounts. Misconfiguration and Poor Infrastructure Misconfigurations are one of the leading causes of data breaches. There are myriad ways misconfigurations can manifest. These improper configurations include poor settings such as using default factory configurations, shoddy permissions, inappropriate settings, and exposing secrets through a lack of proper authentication around cloud storage devices. Unpatched Software and Apps When an organization is negligent in applying security patches and updates to its software in a timely manner, it can create opportunities for data leaks and other types of vulnerabilities. Unpatched software, for instance, can open the door to a zero-day attack. Lost and Misplaced Devices Both company-issued and employee-owned devices can contain an organization’s intellectual property and corporate secrets. The loss of these devices due to theft or carelessness qualifies as data leakage that can easily escalate into a data breach. How can these types of leakages be prevented? Fortunately for organizations, several cost-effective and optimal solutions can be used to prevent data leaks. Conducting Vulnerability Assessments An organization should embrace a policy of conducting periodic vulnerability audits and threat assessments. These can be in the form of penetration tests in which the organization’s security infrastructure is probed for flaws and weaknesses. This proactive measure enables an organization to discover and safeguard potential sources of data leaks. Enhancing Document Security When data leakage occurs, it is invariably through the contents of documents that weren’t sufficiently protected. Organizations should adopt document security measures to protect their business information and corporate secrets. Control Access to Data Rampant and indiscriminate access to data increases the possibility of data leakage. To fix this, organizations should ensure that data access is tightened to only required users and apps. Organizations can achieve this by implementing robust user and cloud-based access control mechanisms and following the principle of least privilege (PoLP). Evaluate and Prevent Third-party Risks An organization might apply the requisite security practices and due diligence but can be exposed to vulnerabilities in its third-party applications. Organizations should monitor third-party applications, including open source and other supply-chain applications, to prevent becoming compromised. Implementing Robust Endpoint SecurityWith the proliferation of remote work, mobile phones, and bring-your-own devices (BYOD) in workplaces, endpoints have become crucial points of data leaks. As a result, companies should strengthen endpoint security by applying multi-factor authentication and intrusion detection mechanisms. Implementing Zero-Trust Security The rise of cloud-based computing, coupled with the explosion of endpoints, including mobile devices, means that for many organizations, perimeter-based security no longer suffices. As a result, cybersecurity practices can no longer afford to trust users and applications already inside the network. Instead, companies should adopt zero-trust security and its mantra of “never trust, always verify.” Implementing Data Loss Prevention (DLP) Tools Data loss prevention is akin to killing two birds with one stone, as it protects and defends against both data leaks and data breaches. Here are the following ways DLP can help: Providing overarching visibility: DLP can provide the high-level and granular visibility necessary to combat data leakage. Infosec teams and network administrators can effectively monitor the network, especially in large organizations. Data leak prevention: DLP software has built-in anomaly detection mechanisms. Most of these are now boosted by artificial intelligence to detect and flag suspicious transfers and movement of data to stop illegal exfiltration. Securing data at all stages of the data lifecycle: DLP solutions can secure data, whether at rest, in motion, or in use. It achieves this by combining data security policies with encryption mechanisms. Data identification: First, data categorization techniques can help a business determine whether data needs to be protected. Moreover, based on this identification, it assists in prioritizing risk, which guides the level of protection to be applied. Securing endpoints: Endpoint DLP is specifically designed to safeguard and overcome the challenges of protecting corporate endpoints like IoT and mobile devices. How Fortra Secure Collaboration Can Help You Stop Data Leakage When paired with DLP, Fortra Secure Collaboration can help tighten up your data protection strategy and protect your data anywhere, wherever it travels. Fortra Secure Collaboration is also highly flexible, allowing you to nimbly apply policies to manage and audit data in real-time. To learn more about how Fortra Secure Collaboration can secure your data and how Fortra Secure Collaboration works alongside DLP solutions like Fortra’s Fortra, click here.