The Endpoint Imperative: The Perimeter is Dead; Long Live the Perimeter!

GovCloud Founder and Veteran’s 360 Showcased in US Veteran’s Magazine

By G C Network | June 13, 2014

Kevin L. Jackson, CEO and Founder of GovCloud Network, LLC, was showcased in US Veteran’s Magazine for his work with Veteran’s 360, a San Diego, California non-profit. With more than…

Cloud Environment Can Enable Fast, Secure Collaboration among Industries, Nations

By G C Network | June 4, 2014

NCOIC’s Kevin Jackson to present new process for creating interoperability via a cyber-secure multi-cloud environment at cloud computing conferences in the U.S. and China WASHINGTON—June 4, 2014—Cyber-secure cloud computing can…

The Federal Government Journey to Cloud Computing: Lessons Learned

By G C Network | June 3, 2014

[Republished from”On The FrontLines” magazine “Cloud Computing in Government: Lesson’s Learned” issue. Download the full 20 page issue online at https://digital.onthefrontlines.net/i/319551 ) In February 2011, Vivek Kundra announced the “Cloud…

Cloud Computing In Government Lesson’s Learned From On The FrontLines Magazine

By G C Network | May 29, 2014

Congratulations to my friends at “On The FrontLines Magazine” for an EXCELLENT presentation of important operational and managerial cloud computing transition lessons. This issues showcases cloud computing leaders from government…

From “Boots on the Ground” To “Heads in the Cloud,” Non-Profit aims to offer Cloud Training & business services to Corporate IT and HR teams.

By G C Network | May 28, 2014

From “military dedication” to “civilian success,”Veterans 360 Services is approaching the challenging transition of military service to civilian life with an innovative, focused and all-inclusive, 360 degree, process of education…

ICH Agile Cloud Consortium Completes Successful Event

By G C Network | May 22, 2014

Thank you to all that participated in yesterday’s ICH Agile Cloud Service Catalog event.    ICH Agile Cloud is an industry-wide effort targeted at developing an open and inclusive cloud service…

ICH Releases Agenda for Agile Cloud Service Catalog Session

By G C Network | May 20, 2014

The Agile Cloud consortium’s second event will occur on May 21, 2014 at TIA Headquarters in Arlington, VA. This event will focus on development of the Agile Cloud Environment Service…

PDNS Offers “Anchor” Cloud Services to Agile Cloud Consortium

By G C Network | May 14, 2014

Private Digital Network Services (PDNS) and partners will provide its national, Private Digital Network (PDN) core and a suite of highly sought after services to the Interoperability Clearinghouse Agile Cloud effort. Its…

ICH/ITAAC Announces Second Agile Cloud Environment Event

By G C Network | May 7, 2014

The 2nd Agile Cloud Environment event will be held on May 21, 2014 at TIA Headquarters. This event will focus on development of the Agile Cloud Environment Service Catalog. The…

Interoperability Clearinghouse Launches “Agile Cloud” Collaboration

By G C Network | April 28, 2014

Last Wednesday, Maj Gen, USAF (Ret) John T. Brennan, Interoperability Clearinghouse (ICH) Executive Director, kicked off the Agile Cloud collaboration. This industry-wide effort is targeted at developing an open and…

Cloud, mobility and the Internet of Things have obliterated the traditional perimeter that protected organizations. The result: Higher productivity, but bigger challenges for security, data protection, and mobile device management.

This episode of the “The Endpoint Imperative” podcast series from Intel, Kevin L. Jackson and Intel’s Yasser Rasheed explore the new normal for security, with a focus on the end users.

Kevin: The topic for this episode is,”The Perimeter is Dead, Long Live the Perimeter”. With me is Yasser Rasheed Director of Business Client Security with Intel. Yasser welcome back.

Yasser: Hi Kevin, happy to be back.

Kevin: This time, however, I’d like to really talk to you about this security perimeter thing. Cloud mobility and the internet things have really obliterated what I’ve always referred to as the wall and moat security paradigm, where working inside the enterprise was safe but working outside of the company’s walls wasn’t. What’s pending impact of this evolution?

Yasser: You know Kevin nowadays with the cloud and mobility trends, we as end users we take our devices and work anywhere and everywhere at anytime. We take our laptops and work from home or from a coffee shop or on the go during the trip. The new shift here is really making us re-think how we protect the information that we have access to. The concept or the traditional concept of protecting at the perimeter with the traditional firewalls and gateways is really non-existent anymore. When I’m using my laptop at a coffee shop, I am no longer going through a firewall to access a cloud service. It’s imperative for the industry to re-think the concept of listening at the perimeter level from a security perspective.

Kevin: Did the IT team miss the boat with getting a grip on the management of security within this new business ecosystem of today?

Yasser: From my perspective, it’s not about missing the boat as much as the industry is moving and evolving very fast and IT organizations, more specifically information security organizations, need to cope with this evolution, and in certain cases may need to be ahead of it. At the same time, by the same token, that evolution is giving an advantage to the hacker community, to the bad guys really, to take advantage of the shift and attack the endpoints. Attack the end users, grab the data, steal the data or lock it in and ask for ransom.

Kevin: These new approaches to information technology have really changed the traditional workplace. Yasser how are IT leaders balancing the benefits of cloud and mobility, things like productivity and accessibility, with the obvious security challenges?


Yasser: Great question Kevin. We know that end users especially the new generations of end users focus tremendously on the ease of use and the productivity, and don’t want to be burdened with additional security processes that they don’t really comprehend. It’s imperative for the IT leaders and information security leaders to balance end-user productivity, the simplicity of integration for IT and the productivity end-user experience for end users. The only way for the industry to evolve and achieve the right level of protection is with the right balance. This is not an easy job to do, however, it’s the only way for the industry to keep moving in this direction.

Kevin: Do you have any advice on how to make security everybody’s job in this new normal?

Yasser: Great question. The first thing I advise everyone is for the leaders in the IT and information security industry to educate their teams and their end users. Education is king. We need to first educate them and get them to the level of comfort with the simple attacks like phishing and how scams happen. More importantly, IT organizations and information security organizations need to focus on four priorities. The top one is identity protection. That is really protecting against identity breaches which today constitute 80% or more of the total number of breaches. The second priority is to protect the data. Data protection is really an imperative because the data is the asset that the attackers are going after. The third priority is about detecting and preventing threats, especially the new and advanced threats that we see nowadays where signature-based detection of viruses is no longer sufficient, it’s necessary but insufficient. The fourth and last priority is the ability to recover quickly from an event of a breach. The breach is a matter of when it happens, not if it happens, and organizations need to be ready recover quickly to a good level of productivity. These are the four priorities that I recommend the industry to focus on, and more importantly, apply the new techniques based on hardware-based security as opposed to traditional software-based security that is no longer sufficient in this space.

Kevin: With that sound advice we’ve come to the end of our time for this episode. We really want to thank Yasser Rasheed with Intel for his insights and expertise.

Yasser: Thank you, Kevin, it was a pleasure to be here.

( This content is being syndicated through multiple channels. The opinions expressed are solely those of the author and do not represent the views of GovCloud Network, GovCloud Network Partners or any other corporation or organization.)

 

Cloud Musings

( Thank you. If you enjoyed this article, get free updates by email or RSS – © Copyright Kevin L. Jackson 2017)

Follow me at https://Twitter.com/Kevin_Jackson
Posted in

G C Network