- My initial advice is to not get caught up
in what others are doing.
Focus on your needs for security.
Make sure to test your tools,
never assume that they will work.
Cloud security tool providers can't test everything
on everything and you could be the one configuration
where things don't work.
You need to find that out upfront.
Continuing on our process to assess your security needs,
keep in mind that the objective is to leverage learnings
from the previous steps in this process and alignment
of client, the cloud security best practices.
This means that we'll take what we've learned,
align it with the best practices
and use that to select the tool set.
As we work to understand our security needs,
we make conclusions as to what tools to pick
based on the evolving process and understanding this far.
At this point, we should know what the requirements are
including business and technical.
Moreover, we should know what the best bets are in tools
and technology that will most likely be the best use case
for our investment.
Our security approach and tools needs to work
with public clouds, private clouds and traditional systems.
So, what are the best practices in selecting
the right security technology?
Here are a few that I recommend that you consider.
Security systems availability.
The responsiveness needs to be considered a top priority.
This means that you need to test and benchmark
your security tools.
Degree compliance.
There are typically laws that have to be adhered to
in your industry from technical
as well as the business standpoint.
Number of application groups.
Developers trained on security tools, including operations,
developers and other roles that exist in the organization.
Percent of systems and application
utilizing security services.
This needs to be understood.
A few applications are leveraging the security technology,
the holistic approach to cloud security has much less value.
Completeness of system documentation,
meaning that we need a complete set of documentation
to ensure that we're detailing out the use of the tools.
Improvement in the ability to enforce security
and privacy policies, meaning that we're automating
this process as much as possible.
If you follow these guidelines in picking
your security tools,
you find you'll pick the right tools the first time.