Enterprise Cloud Security and Governance: Efficiently set data protection and privacy principles

What do you get with eBook?

Instant access to your Digital eBook purchase

Download this book in EPUB and PDF formats

Access this title in our online reader with advanced features

DRM FREE - Read whenever, wherever and however you want

Defense in Depth Approach

The security mechanisms that a security engineer may apply really depend on the threats, criticality of data, and associated risks. If your financial transaction data are in files (papers), then the concentration should be more on the physical security of the room where these financial files are placed.

We have to understand where exactly the data lies, the criticality of this data, and the associated risks. This is one of the reasons why security tools and strategies differ across organizations.

Some organizations that deal or store sensitive data such as credit/debit cards need to follow very stringent security standards that will further be evaluated as a part of a compliance audit by an external auditor.

In this book, we assume that your environment is in the cloud and the data or the process that is being stored is important for the business of the...

Key benefits

• Gain a firm grasp of Cloud data security and governance, irrespective of your Cloud platform

• Practical examples to ensure you secure your Cloud environment efficiently

• A step-by-step guide that will teach you the unique techniques and methodologies of Cloud data governance

Description

Modern day businesses and enterprises are moving to the Cloud, to improve efficiency and speed, achieve flexibility and cost effectiveness, and for on-demand Cloud services. However, enterprise Cloud security remains a major concern because migrating to the public Cloud requires transferring some control over organizational assets to the Cloud provider. There are chances these assets can be mismanaged and therefore, as a Cloud security professional, you need to be armed with techniques to help businesses minimize the risks and misuse of business data. The book starts with the basics of Cloud security and offers an understanding of various policies, governance, and compliance challenges in Cloud. This helps you build a strong foundation before you dive deep into understanding what it takes to design a secured network infrastructure and a well-architected application using various security services in the Cloud environment. Automating security tasks, such as Server Hardening with Ansible, and other automation services, such as Monit, will monitor other security daemons and take the necessary action in case these security daemons are stopped maliciously. In short, this book has everything you need to secure your Cloud environment with. It is your ticket to obtain industry-adopted best practices for developing a secure, highly available, and fault-tolerant architecture for organizations.

What you will learn

• Configure your firewall and Network ACL

• Protect your system against DDOS and application-level attacks

• Explore cryptography and data security for your cloud

• Get to grips with configuration management tools to automate your security tasks

• Perform vulnerability scanning with the help of the standard tools in the industry

• Learn about central log management

What do you get with eBook?