Reference) Usage status of cloud applications

Do you know how many cloud applications your company is leveraging?

Reference) Usage status of cloud applications

• Risk of the cloud application itself
• 1. Safety of the operating company (whether there is business continuity or whether the company is operating in a risky country)
  2. Data handling policy (What is the copyright of the information exchanged on the cloud application?)

• Risk for employees who use
• 1. Are you casually uploading sensitive company information to the cloud?
  2. 1. External information (customer information, confidential business information)
     2. Internal information (information on individual employees, including personnel affairs and salaries)
     3. Company information assets (information to support the company's business)
        E.g.) Source code and design information for our own products Other sources of business

Emergence of CASBs (Cloud Access Security Brokers)

• Generic term for technologies to solve the aforementioned issues
• Visualize cloud service usage, identify potential risks, and apply consistent security policies

2015 Broadcom M&A CASB market Elastica

• Plans to gradually integrate technologies using Elastica's technology, which visualizes 15,000 types of applications

(1) AUDIT (visualization of shadow IT)

Audit/Summary

Upload access logs such as Proxy and Firewall to Symantec CloudSOC (CASB). Uploaded access logs are analyzed by Symantec CloudSOC (CASB) for shadow IT reporting

• You can check the usage status of cloud apps graphically.
• 1. What kind of applications are used by CASB and whether the applications are safe
  2. It is possible to grasp from the list

• Employee usage status can be checked graphically
• 1. Understand which users are using which apps and to what extent

• Score judgment function
• 1. It is possible to check the persuasive analysis results of "why it is dangerous" rather than simply "this is dangerous"
  2. Help persuade employees and formulate company rules

(2) Securlet (enhanced security for Sanctioned IT (cloud applications that are approved for use))

Securlet/Usage image

Enables visualization and control of shadow data existing on cloud applications by linking with Securlet-compatible cloud applications and APIs

• Visualization and control of shadow data
• 1. Visualization of data shared externally and internally

• Visualization of details of each data and confirmation control of sharing status

• Visualization of data attached to external emails

• Confirmation control of shared data on SharePoint and OneDrive

• List of cloud applications supported by Securlet
• 1. Office365
  2. Salesforce
  3. Yammer
  4. Google Apps
  5. AWS
  6. Dropbox
  7. BOX