Seven key Hybrid
IT security
priorities
for 2022
and beyond
StartHybrid IT:
More important than ever.
More complex than ever.

Hybrid IT has long been seen as a valuable
way to transform and enhance both internal
operations and those that intersect with customers.
Over the past decade, it’s become
clear that organizations acrossall sectors understand that thecapabilities of Hybrid IT are vitalto their ability to thrive in ourincreasingly digital-centric age.
And the pandemic accelerated thattrend considerably.
A 2020 survey of C-suite
executives by McKinsey, revealed
that organizations were actively
speeding up their existing plansby a factor of seven. They werefocused on leveraging the power ofa range of digital technologies withcloud migration and Hybrid IT as key
priorities. It was as if they’d jumped
seven years into the future.1

But that has introduced the spectreof complexity. Organizations are,of course, becoming more maturein terms of how they can deploy
Hybrid IT and make use of thecloud, but it’s clear that there isa downside.
When it comes to cybersecurity,
complexity is a threat just as muchas the hackers are. Simply, Hybrid IT
environments not only exacerbate
an organization’s existing security
challenges but also introduce new
obstacles which can endanger it.

1. h ttps://www.consultancy.uk/news/26372/covid-19-has-accelerated-digitaltransformation-by-seven-years

Contents
So, as organizations enter a newphase of growth, IT leaders facea unique challenge: transform froman operational team that “keeps thelights on” to an engine of continuous
innovation and business growth.
Yet while the accelerated
digitization mandate is clear, thejourney to sustainable success iscomplex. It’s vital that they sustain
operational excellence and help
drive innovation while, at the sametime, empowering business agility
and enable future-ready projects
to get to market at speed.

At the same time, CISOs arechallenged by the escalatingcompliance demands and complex
threat landscape as well as
the increasing skills shortage –which makes it harder to speed
up innovation and control riskmanagement.

Priority 1:
Coping with an historic increase in cybercrime

Priority 2:
Don’t dig a moat, build a digital perimeter, and train your peoplePriority 3:
Identify everyone, and limit access to people who really need it

Priority 4:
Govern usage for every user and cloud service

Priority 5:
Manage compliance across your entire cloud environment

Priority 6:
Wargame breaches and attacks realisticallyPriority 7:
Optimize and automate cloud security to cope with increasing consumption

Priority 1:
Coping with an
historic increasein cybercrime

As one publication put it, “2021 has beena banner year for cybercriminals, they have taken
advantage of the COVID-19 pandemic and theincrease in remote work, attacking both technicaland social vulnerabilities.”2 From increasingly
ingenious methods of online financial fraud torocketing rates of ransomware on to phishingattacks on every aspect of business especially
supply-chains, the world is reeling from a waveof cybercrime. The rapid emergence oforganized gangs with villainous names likeREvil have become almost weekly occurrences.
That’s resulted in rising levels of corporate
uncertainty and disruption. And that in turnhas accelerated the need for even more digitaltechnologies to protect people, data, and things.
The statistics are frightening. There were 93%
more reported ransomware attacks, for instance,in the first half of 2021 than in the previous year.3
Organizations didn’t just suf fer an interruption totheir operations, but the hackers also stole data
which they then threatened to make public. They
also targeted the main victim’s partners, vendors,
and customers in a tactic called ‘triple extortion.’

2. https://www.csoonline.com/article/3634869/topcybersecurity-statistics-trends-and-facts.html
3. https://www.computerweekly.com/news/252504676/Ransomware-attacks-increase-dramatically-during-2021

Cybercrime will get worse in 2022. That’s an easy
prediction to make. The acceleration to the cloud andthe use of Hybrid IT means that there will be many more
millions of people working from home at least part of theweek, more mobile devices with work-sensitive data andapplications on them, and an increasing threat surface
that’s less of a ‘surface’ than a billion points of vulnerability
moving from wi-fi network to wi-fi network. Hackers lovemoving targets!4
So, the first priority is the biggest: cope with a tsunamiof threats in a coherent, cohesive, and planned way.
Accept the fact that nothing is safe, and no one canbe trusted without letting fear inhibit your ambitions.
Fujitsu’s philosophy is simple: with the right planningand preparation coupled with the best technologies underpinned by focused training and knowledge so thatyour people understand the threats that are out there- you can move forward with confidence, protect yourpeople and data, and drive your business ambitions.

4. https://medium.com/geekculture/cybersecurity-in-2022-growingconcern-with-greater-opportunity-8a49828e00d5

Priority 2: Don’t dig a moat,build a digital perimeter,
and train your people
The new world of hybrid working
has made the old ‘castle and moat’approach to security obsolete.
In truth, it’s been becoming lessef fective for at least a decadeor more. No organization can dig
a moat, build an impenetrable wall,and then focus its defenses ona single gateway. There are no
obvious corporate boundaries.
You can’t distrust everything thatis outside, and trust everyone andevery device that’s inside.
That’s why you need to moveto a Zero Trust model
It sounds stark, but it’s actuallya remarkably simple concept.
Assume that there will be abreach, and that anything can becompromised, and that no-one isreally who they say there are or isacting in a responsible way.

That does not mean that you don’t
trust your employees, partners,
suppliers, or customers – as people.
It’s actually about knowing whothey are, what they are doing, what
technology they are using, and whatlevel of authorization they have foreach thing they do, every time they
do it, wherever they are doing it.
The ‘perimeter’ surrounds theirdevice, connection, and identity.
No walls or moats needed.
The Zero Trust approach meansthat you must design your security
from within your organization,
not outside. And the technology
isn’t the point. It’s vital, but what’smore important is establishinga security mindset that extends
from employees to third-parties tocustomers. Put your security controls
close to your devices and train yourpeople to be constantly vigilant andto do the right things every time.
The simple truth is that people are
the most vulnerable elements inyour security. If they click on thewrong thing or are careless about
which network they use, yourdefenses, no matter how elaborate
they are, can’t work.
Research study –Building a Cyber Smart Culture
Learn more

You can set up a ‘cybersecurity
mesh’ which, by default, distrusts
every device which attempts toaccess your broader network.
This means that data, systems,
and equipment are treated equallyand securely. It doesn’t matter
where they are located, in yournetwork or outside it. Nothing istrusted until you know it canbe trusted.

Priority 3: Identify everyone,and limit access to people
who really need it
If you’re working in a castle with a moataround it, then you know that everyone(and every machine) within the walls ofyour enclave can be trusted and so you
can allow them access to the crownjewels. The new digital perimeter
knows no bounds. That’s great foragility, ef ficiency, and innovation but
bad for security. One of the key vectors
for cybercriminals is to trick employees
into handing over the keys to vaults.
In a Zero Trust environment you
assume that the person you think istrying to access data or processes is
not who they say they are. Now, thatsounds like you’re adding barriers toseamless operations and connections;
you aren’t. The point is to create securesign-on and self-service features thatmatch the needs of each individual
and their role.

You allocate access based on specificneeds. Then their credentials are also
kept safe. Your security policies need
to be clear and targeted. Don’t giveeveryone a high level of access, only
those who really need it.
Gartner’s Hype Cycle for Endpoint
Security, 2021 focused on howorganizations can achieve their goals
while reducing costs and improving
visibility and control. The emphasis
has to be on ‘Unified Endpoint
Security’ which Gartner says will bea high priority for Chief Information
Security Of ficers (CISO’s), CIOs, andcybersecurity teams as they seek
to close the gaps in their endpoint
infrastructure and avert potential
breaches before they happen.

‘Don’t give every
one a high level ofaccess, only those
who really need it.’Priority 4: Govern usage forevery user and cloud service
You must establish control over every
aspect of your cloud environment andthe usage of any cloud applications withinyour organization. ‘Shadow IT’ has always
been a key threat vector for malicious
attacks. A laptop that’s not authorized
to work on your network, a programthat’s not sanctioned by your IT team,anything that a user introduces into yourorganization which, in itself, is dangerous.
The priority for 2022 and beyond is toestablish strong governance. That means
defining what can and can’t be used, andthen enforcing your rules. There has been
an exponential growth in apps which are
attractive to employees because theysave them time and hassle. Your security
needs to define which are acceptableor, better still, provide equivalent
convenience via applications you havevetted and can be sure are secure.

A Cloud Access Security Broker (CASB)
service will enable you to do just that.
The service can sit within your businessor on cloud-based security policy
enforcement points and are placed
between your employees and the cloudservices they use. Simply, they bring
together all your rules and enforce
them. People can only access what you
want them to access. CASB’s ensurethat authentication, single sign-on,
authorization, credential mapping,device profiling, encryption, tokenization,
logging, alerting, malware detection/
prevention are all carried out when andwhere they are needed. Fujitsu’s CASB
covers all of those points, and more.

Priority 5: Manage
compliance acrossyour entire cloudenvironment

The cloud is, by its very nature, ephemeral. That’s its strength – it delivers
agility, flexibility, and scalability at speed – but it’s also a source of threat.
The regulatory landscape around everything digital, the protection of personal
data as well as intellectual property, has been tightening for the last decade,and is set to become even more stringent. That’s good for all of us.
A report in 2019 showed thata massive 81% of US consumers
said they needed to trust a brandbefore they could buy from them,with 55% citing fears for theirpersonal data.5 The introductionof GDPR by the European Union
has concentrated minds acrossboth business and data protection
regulators. It’s seen as a success bymost people, and there are clear
signs that regulators have become
emboldened and will get tougher in
2022.6 In 2020, the EU issued over£147 million ($193 million) in fines
according to DLA Piper, a law firm.
When a regulator issues a fine,whatever its size, the specificmonetary value isn’t the point.
What counts is trust. In sectors
like healthcare or financial services,
any kind of fine can undermine

trust in the brand and the services
provided. That can be fatal inmarkets which are experiencing
disruption from new entrants.
So, it’s clear that compliance is
key to getting value from theinvestment any organization makes
in both the cloud and its security.
Cloud Security PostureManagement (CSPM) is a valuable
tool for any organization. It’s fast
becoming a much sought afterfeature and the size of the market
is estimated to be worth $9 billion
by 2026.7 CSPM provides thesolutions and services you needto protect your applications, data,networks, endpoints, and any
infrastructure that’s connected tothe cloud. It does it by checking
every configuration, policy, andstandards violations based on

current regulations relating
to security and privacy
especially of customer data.
Simply, it keeps you aheadof current regulations evenwhen they change.
So, if there are any systems
which have been misconfigured,or there are weak identity checks,
or there have been attempts tohack any application or database,then the CPSM will find it, help
you fix it, and then protect itgoing forward.
5. Edelman Trust Barometer 20196. https://www.zdnet.com/article/gdpr-finesincreased-by-40-last-year-and-theyreabout-to-get-a-lot-bigger/
7. https://www.prnewswire.com/
news-releases/cloud-securityposture-management-market-worth9-0-billion-by-2026--exclusive-report-bymarketsandmarkets-301228180.html

Priority 6:
Wargamebreaches
and attacks
realisticallyYou need to go on the of fensive. That’s
what the hackers are doing. They rely oncomplacency and organizations focusing
on agility at the expense of security. Agility
is vital, of course, but not if it leaves you
vulnerable. Wargaming the future is seen by
many to be the best way to understand boththe positives and the downsides of cloud.
That’s something that most organizations
can’t do properly on their own. They needa valued (and trusted) security partner tohelp them set up realistic scenarios, runthem, and then learn from the results.
A wargame is the simplest and best way
to find gaps in your defenses. It’s why
the military run expensive war games.
What you learn in action strengthens
your ability to avoid needing to takeserious action in the future.

Many cybercrime analysts emphasize
the need to ‘think like a hacker.’ A hacker
knows that, in many cases, seemingly
stringent security policies are notfollowed consistently. There’s always a weak
point – technical or human (usually human)– so a simulated attack is a great way to findthem. Working with a Consult & Professional
Services provider (like Fujitsu) to deliver
Breach & Attack Simulation (BAS) is thebest way to test the vulnerabilities
you suspect and find those you
don’t know about.

The attacks can be tailored to specificareas, systems, or even teams, so that you
can see how ef fective your security postureis and where it needs to be strengthened orchanged completely. It’s important to workwith a provider that knows what potential
attackers are doing – and what they might
do – so that you get as close to a real-world
attack as possible.

Priority 7: Optimize andautomate cloud security to copewith increasing consumption
The pace of digital transformation
across all sectors is accelerating.
As mentioned before, COVID has
added to the urgency of manybusinesses’ migration to the cloudand boosted consumer adoptionof cloud services, but the trend
pre-dated the pandemic and willcontinue long after it’s over. One
estimate predicts that spending
on cloud computing will reach $1.2
trillion by 2028.8 The full arrival of 5G
will see billions of IoT devices added
to networks everywhere, while AI
will become standard across many
applications and services.
That rapid growth in cloudconsumption has been accompanied
by an equally rapid increase in thenumber of threats and alerts. The
more alerts there are, the more likely
it is that they will become routine

giving rise to ‘alert fatigue.’ IT security
teams can become overwhelmed
and miss the signs of a significant(and dangerous) attack. That’s why it’s
important to use Security Information& Event Management (SIEM) andSecurity Orchestration, Automation
and Responses Services (SOAR).
SIEM enables you to cope with therising volumes of security alerts
which come with increased usage ofcloud services. It gives you the ability
to see what’s happening across theentire range of your IT services andprovides the context you need tounderstand which alerts need urgent
action. SIEM works by aggregatingdata from multiple systems and thenanalyses it to find anything unusualand might suggest a potential attack
is taking place or has happened.

All the alerts are channelled toa central place and then the SIEM
intelligently ranks them so that
personnel can investigate the mosturgent first. Then it’s up to theteam to act.
SOAR can work in tandem with SIEM,
or on its own as it includes some of its
features. The significant dif ferenceis that SOAR takes the analytics andcreates a defined investigation pathfor each alert and then creates anautomated investigation workflow
so that by the time one of your teamsee it there’s more information andmore potential for swift action. It alsomeans you can fully, or semi automate,responses to threats and reduce
the need for manual intervention.
That in turn improves Mean TimeTo Recovery as well as making yourcybersecurity team more ef ficient.
8. https://www.businesswire.com/news/home/20210810005902/
en/Global-Cloud-Computing-Market-2021-to-2028---SizeShare-Trends-Analysis-Report---ResearchAndMarkets.com

Fujitsu is well-placed to help
you handle all your Hybrid ITsecurity challenges
There are many cybersecurity partners you
can work with as you seek to get ahead of
the seven priorities I’ve outlined above.
But Fujitsu is extremely well-placed todeliver the solutions and consultancy you
need to cope with each of them withoutslowing down your business.
And that’s the crucial point: security should
not inhibit your ability to serve customers,
achieve value, and drive innovation. Working
with the right partners to alleviate theburden of protecting your business andpeople is an investment in agility, flexibility,productivity, and compliance.
Fujitsu of fers you the ability to make themost of the Zero Trust model and makethe most of cloud’s ubiquitous advantages.
We build a perimeter that is both dispersed
and inherently secure at every endpoint,
protecting each person while allowing themto access what they need to access and areauthorized to use. Nothing more, nothingless. Our Identity Management and Access
Practice provides a unified and seamless
identity user experience which gives you
control over passwords and ID’s etc, without
inhibiting users’ ability to be productive.
We have extensive experience in dataprotection and ensuring compliance withregulations such as GDPR and PCI-DSS, andour consultants help develop ef fective data
security policies, standards, and processes
to protect reputation as well as keep you
ahead of regulatory evolution.
We of fer CASB, CSPM, SIEM, IDAM, BAS andSOAR to achieve all of the security benefits
outlined in this Guide. When you workwith Fujitsu, you will benefit from a trusted
partner which has built on generations ofexperience to achieve the expertise andvision necessary to not only protect thefuture but build it too.

To find out more about all ourcloud security for Hybrid IT services visit:https://www2.fujitsu.com/global/uvance/hybrid-it/© FUJITSU 2021. All rights reserved. FUJITSU and FUJITSU logo are trademarks of Fujitsu Limited registered in many jurisdictions
worldwide. Other product, service and company names mentioned herein may be trademarks of Fujitsu or other companies.
This document is current as of the initial date of publication and subject to be changed by Fujitsu without notice. This material
is provided for information purposes only and Fujitsu assumes no liability related to its use.