What is Shadow IT

• Shadow IT refers to cloud applications that are used by employees without permission from the company.
• Enterprises use more cloud services than IT admins realize

Risks of not knowing shadow IT

Information leak from domestic cloud storage

problem

• I didn't understand the security of the service (data was stored unencrypted)
• Didn't realize employees were using cloud storage services for business

Configuration image of Skyhigh CASB for Shadow IT

Determine the risk of cloud services based on CSA

• Cloud service risks are quantified using approximately 50 items based on CSA (Cloud Security Alliance) guidelines

Reduces man-hours for responding to questionnaires and confirming agreements related to cloud service risk assessment

Skyhigh CASB risk judgment screen

Evaluate similar cloud services side by side

• View risk assessment items for each service side by side

You can use it to consider introducing services to your company and to guide users who have applied for use of alternative services.

Sanctioned IT and risk

• What is Sanctioned IT IT?
  Cloud services contracted and used by companies, authorized cloud services (Microsoft 365, box, Slack, etc.)
  Safe as a service, but not all security is guaranteed by the service provider
  The following risks must be addressed by the user

User abuse

account takeover

Data sharing with external parties

Shared Responsibility Model and CASB (Sanctioned IT) Visibility and Control Range

Support for IaaS

• Check logs and configuration information using API to detect account compromise and vulnerable settings

Skyhigh CASB makes API calls directly to the target SaaS and visualizes the sharing status of user activity files.
No network changes or agent installation required.

Feature 1: Activity Monitoring

• Collect logs via API and detect suspicious events using machine learning

Feature 2: UEBA

• Detect unusual and suspicious events as anomalies and classify their severities

Feature 3: Collaboration Control

• Visibility of internal and external collaborators within the managed tenant
• Analysis of external collaborators' access to critical information

License lineup list

• Shadow IT
  • The log retention period on the GUI is 1 year.
• Sanctioned IT
  • The standard log retention period on the GUI is 100 days.
    As an option, it is possible to extend the storage period to 1 year (365 days) for each regular price license + 10% fee.

remarks

• Only major services are listed for Sanctioned IT licenses. Please inquire about each optional license separately.
• Please inquire separately about other supported services.