IBM Security Services for Cloud

Protecting the hybrid multi-cloud

Presenter’s nameTitle

Cloud hasturned traditional
cybersecurity on its
head99%of cloud security
failures will be theorganization’s fault$474
BillionGlobal Cloud
Revenue to Total$474 Billion in
2022*

$3.8M

~ ½

Global average
cost of a data
breachof world’s stored
data expected toreside in public
cloud by 2025

IBM Security / © Copyright IBM Corporation 2022
* Source: Gartner, November 10, 2021.

UnanticipatedAcceleration to Cloud

Disparate Controls &Decentralized Management

Pandemic accelerated changeand demand to allow users toaccess the enterprise fromanywhere using any device

New computing approaches, including
Edge & multi-cloud, require robust
security platforms that can deploy
controls consistently & seamlessly

Regulatory Compliance
Churn & Governance

Growing Attack Surface& Threat LandscapeWith the migration of workloads to
the Cloud, Security, andcompliance are top-of-mind
across hybrid multi-cloudenvironments

Growing threats, tools and data
inhibit security operations acrosshybrid environments

Securing the hybrid enterprise requires a comprehensive cloudsecurity program
01

Defining and implementing a Cloud
Security Strategy

Comprehensive, Consistent & Zero Trust Centric

02 Enforcing policies to protect cloudresources
03 Ensuring security posture &compliance needs are continually met
04 Centralizing detection & response tothreats 24x7

IBM Security / © Copyright IBM Corporation 2022

Identity

Users & Context

Workloads

Endpoints & Platforms

Data

Data & Applications

NetworkNetwork & Edge

IBM Security Services for Cloud Services Framework
Services &Delivery
ModelsAdvisory

NIST CSF Alignment

Identify••

Integration

Cloud Security Assessment
Cloud Security Strategy•••

Secure Architecture
Foundations
DevSecOpsCloud IAMProtectManaged••Retainer

Cloud Native Security Services
Cloud, SaaS Posture andWorkload Protection

Detect, Respond•••

Tailored

Secure Cloud Foundations
X-Force Incident Response
Post Breach Response•Address customer specificHybrid Cloud requirements

Recover

Zero Trust for
Hybrid Cloud
Identities

Data

Applications

Workloads

Networking

DevSecOps

Hybrid Clouds
SecuredIBM Services
Platform

IBM Security / © Copyright IBM Corporation 2022

DIGITAL
USER
EXPERIENCECOMPREHENSIVESECURITYOPERATIONSDATAINGESTION &ENRICHMENTCOGNITIVE
ANALYTICS

CLOUD SECURITY POSTURE MGMT|VALUE PROP

EnsureCompliance andSecurity Posture
Visibility of Compliance

Current state view of multicloudsecurity configuration andcompliance posture

Optimized Security Controls
Design and configuration of cloudsecurity controls and remediation
activities

Maintain Compliance with
Security Regulations
Steady-state monitoring andmanagement of cloud security
controls and compliance

Cloud
Security
Posture Mgmt
IBM Security / © Copyright IBM Corporation 2022

Defining and monitoring of security and compliance controls in yourcloud environment is critical to detect and address misconfiguration risk
Key Delivery Activities

Visibility of cloud assets
and threats

Optimized cloud security
controls- Validate your cloud security
requirements and use cases- Customized configuration andoptimization of your cloud security
controls- Align implementation plan withyour enterprise complianceobligations- Discover and facilitate onboardingof your cloud accounts- Design and implement automatedremediation activities- Integration with your IT and security
technologies, and processes- Review your integration
requirements

Continuous monitoring of safe
configuration & compliancedrift- Continuous secure configuration
management and compliancereporting- Provide ongoing policy
optimization- Triage and response assistance toaddress drifts in your security
posture- Review your network and user
activity for anomalous behavior

Deliverables- Current state review report- Solution Architecture and Blueprint- Ongoing alert triage and escalation- High level solution outline- Implementation close-out report- Onboard accounts to CSPM
solution- Configured solution- Weekly review of security findings
and remediation activities

1-2 Weeks

2-4 Weeks

Ongoing- Monthly review of policy
enhancements and auto-remediation
activities

CLOUD SECURITY POSTURE MGMT | CASE STUDY

Multinational ConsumerElectronics
2020

Azure, AWS, GCP

Cloud Security PostureManagement

IBM Security / © Copyright IBM Corporation 2022

The Client Challenge:

The IBM Solution:- Multiple compliance obligations to adhere
to including PCI, HIPAA, and internal
standards

Showcased delivery capabilities through anenhanced proof of concept with the client- Expanding to a multi-cloud environment, as
well as significant workloads on-premise as
well- Did not typically procure consulting orsystem integration support for security
tooling

The Bottom Line:
Looking to improve visibility and telemetry for
its multi-cloud environment, as well as for thegrowing on-premise and cloud container
infrastructureThis proof of concept was a high engagement
delivery over the course of 7 weeks tooperationalize key aspects of the solution
IBM team provided clear and present
executive alignment with the CISO, partneringwith the vendor as well
Leveraged IBM Security Research to establish
a foundation of through leadership and coinnovation
Delivered implementation and managed
services for ongoing steady-state operations

Unified Client Interface

TalentServices

Security Architects
Security Engineers
Security Analysts

Integrated platform+ best in class tools+ Real time securityinsights + Secureenvironment

TechnologyIBM Security Verify
IBM X-Force Protection Platform
IBM CloudPak for Security– Single Interface– Insights

Cloud SecurityAssessment

Cloud SecureFoundations– Rapid Deployment– AI based Insights
HybridMulticloudEnvironment

On-premises

Cloud Security
StrategyManaged Cloud Security Services (IaaS / PaaS / SaaS)

Cloud
Security PostureManagement

SaaS
Security PostureManagement

CloudWorkload
Protection

Threat Management– Secure Environment– Automation

Cloud Consulting & System Integration Services

Cloud COC<< Hybrid Cloud Security Management >>Security Services
delivered througha unifiedexperience

CloudNativeControlsGet to value faster witha strong enterprisecloud security partner

Microsoft Azure Cloud certified professionals
across the globe-Consulting & Systems Integration-Managed Security Services-

Solution Design-

Product Management & Engineering

Vendor and cloud agnostic expertise & support
MicrosoftGold
Consulting
Partner-

Multi-cloud managed security services providing centralized
visibility, management, and monitoring of security operations
across hybrid environments.

-Built on an ecosystem of best-of-breed security technologies,
spanning cloud-native & 3rd party.

Comprehensive support for hybrid multi-cloud

IBM Security / © Copyright IBM Corporation 2022

-Leading portfolio of comprehensive cloud strategy & risk
consulting capabilities coupled with strong security strategy,integration & operations expertise.

-Recognized by leading analyst firms as leader in MSSP space.
Known for deep cloud relevant innovation and comprehensive
threat management services.

NEEDREVIEWNext Steps
1
Take our free Quick
Cloud Security SelfAssessment
ibm.biz/cloud-sec-maturity

IBM Security / © Copyright IBM Corporation 2022

2Sign up for our deepdive Rapid CloudSecurity Assessment

3Learn more
about our Security
Services for Cloud
https://ibm.com/security/services/ cloudsecurity-services

9Thank you

Follow us on:
ibm.com/security
securityintelligence.com
ibm.com/security/community
xforce.ibmcloud.com@ibmsecurity
youtube.com/ibmsecurity© Copyright IBM Corporation 2022. All rights reserved. The information contained in these materials is provided for
informational purposes only, and is provided AS IS without warranty, of any kind, express or implied. Any statement of
direction represents IBM’s current intent, is subject to change or withdrawal, and represent only goals and objectives. IBM,the IBM logo, and other IBM products and services are trademarks of the International Business Machines Corporation, inthe United States, other countries or both. Other company, product, or service names may be trademarks or service marksof others.
Statement of Good Security Practices: IT system security involves protecting systems and information through prevention,
detection and response to improper access from within and outside your enterprise. Improper access can result in
information being altered, destroyed, misappropriated or misused or can result in damage to or misuse of your systems,
including for use in attacks on others. No IT system or product should be considered completely secure and no single
product, service or security measure can be completely effective in preventing improper use or access. IBM systems,
products and services are designed to be part of a lawful, comprehensive security approach, which will necessarily involve
additional operational procedures, and may require other systems, products or services to be most effective. IBM does notwarrant that any systems, products or services are immune from, or will make your enterprise immune from, the malicious
or illegal conduct of any party.