Shadow IT: The CISO Perspective on Regaining Control
Download as PPTX, PDF1 like1,035 views
The document presents a panel discussion on Shadow IT featuring security experts who discuss the extensive use of unsanctioned cloud applications in enterprises, with 86% of such applications considered shadow IT. The panelists highlight the risks associated with shadow IT, including regulatory and governance concerns, and propose methods to manage these challenges effectively. Additionally, the document emphasizes the importance of balancing employee needs and organizational security in addressing the rise of shadow IT.
Shadow IT: The CISO Perspective on Regaining Control
- 1. © 2014 CipherCloud | All rights reserved 1 Shadow IT: The CISO Perspective Panel Discussion with Security Experts Paul Simmonds CEO, Global Identity Foundation Former CISO, AstraZeneca Rob McGillen Chief Information Officer Grant Thornton International Chenxi Wang VP, Cloud Security & of Strategy CipherCloud
- 2. © 2014 CipherCloud | All rights reserved 2 Panelists Rob McGillen Chief Information Officer Global head of technology and CIO Responsible for global IT shared services and technology lead for 40,000 employees in 130 countries. Drives global IT transformation, cyber- security, accounting practices with cloud computing. Paul Simmonds CEO, Global Identity Foundation Co-Founder Jericho Forum Co-Editor, Cloud Security Alliance Former CISO, AstraZeneca Leading expert in information security, de- perimeterization, global corporate architecture and alignment of security and business strategies. Chenxi Wang, PhD VP, Cloud Security, CipherCloud VP Strategy, Intel Security VP Forrester Research Technology expert and strategist in cloud, mobile, and enterprise security. Prominent industry analyst and public speaker and trusted advisor for IT executives. Former professor of computer engineering at Carnegie Mellon Willy Leichter Global Director, Cloud Security CipherCloud Expert in helping Global 1000 companies meet security and compliance challenges as they migrate business-critical applications to the cloud. Moderator
- 3. © 2014 CipherCloud | All rights reserved 3 Scale of Enterprise Cloud Usage The average global enterprise utilizes over 1,100 cloud applications “ “ NA EU
- 4. © 2014 CipherCloud | All rights reserved 4 Extent of Enterprise Shadow IT 86% of cloud applications used by enterprises are unsanctioned Shadow IT “ “
- 5. © 2014 CipherCloud | All rights reserved 5 Cloud Collaboration Example Assessmentofmajormediacompany • 1100+ separatecloudapps discovered • 24%identified ashighrisk • 113separatecollaborationappsin use • Cloudstoragesecondlargest category
- 6. © 2014 CipherCloud | All rights reserved 6 Defining ‘Shadow IT’ • What does it mean to you? • How big is the problem? • How did we get here? Rob McGillen Chief Information Officer Paul Simmonds CEO, Global Identity Foundation Former CISO, AstraZeneca Chenxi Wang, PhD VP, Cloud Security, CipherCloud
- 7. © 2014 CipherCloud | All rights reserved 7 What are the risks? • Examples of runaway Shadow IT • Regulatory, legal and governance risks • Who owns the problem? Rob McGillen Chief Information Officer Paul Simmonds CEO, Global Identity Foundation Former CISO, AstraZeneca Chenxi Wang, PhD VP, Cloud Security, CipherCloud
- 8. © 2014 CipherCloud | All rights reserved 8 Addressing the problem • Balancing meeting employee needs with saying “no” • How to get actionable visibility • Positive examples of companies meeting the challenge Rob McGillen Chief Information Officer Paul Simmonds CEO, Global Identity Foundation Former CISO, AstraZeneca Chenxi Wang, PhD VP, Cloud Security, CipherCloud
- 9. © 2014 CipherCloud | All rights reserved 9 Rob McGillen RobMcgillen@gti.gt. com Paul Simmonds paul.simmonds@globali dentityfoundation.org Chenxi Wang, PhD cwang@ciphercloud.c om @chenxiwang Willy Leichter wleichter@ciphercloud. com @willyleichter Q&A
- 10. © 2014 CipherCloud | All rights reserved 10 500+ Employees Company 3.0+ Million Active Users 13 Industries 25 Countries 7 Languages P 13 Patents About CipherCloud Solutions Cloud Discovery Cloud DLP Strong Encryption Tokenization Activity Monitoring Anomaly Detection Customers 5 out of 10 Top US Banks 3 out of 5 Top Health Providers Top 2 Global Telecomm Company 40% of Global Mail Delivery Largest US Media Company 3 out of 5 Top Pharmaceuticals
- 11. © 2014 CipherCloud | All rights reserved 11 More Information Watch On-Demand Recorded Webinar: Shadow IT: The CISO Perspective on Regaining Control Visit our new: Global Compliance Resource Center For additional information : • Website: www.ciphercloud.com • Email: info@ciphercloud.com • Phone: +1 855-5CIPHER Twitter.com/ciphercloud Youtube.com/user/CipherCloudVideo Linkedin.com/company/ciphercloud Facebook.com/ciphercloud Connect with Us!