IBM Security Services for Cloud

Protecting the hybrid multi-cloud

Presenter’s nameTitle

Cloud hasturned traditional
cybersecurity on its
head99%of cloud security
failures will be theorganization’s fault$474
BillionGlobal Cloud
Revenue to Total$474 Billion in
2022*

$3.8M

~ ½

Global average
cost of a data
breachof world’s stored
data expected toreside in public
cloud by 2025

IBM Security / © Copyright IBM Corporation 2022
* Source: Gartner, November 10, 2021.

UnanticipatedAcceleration to Cloud

Disparate Controls &Decentralized Management

Pandemic accelerated changeand demand to allow users toaccess the enterprise fromanywhere using any device

New computing approaches, including
Edge & multi-cloud, require robust
security platforms that can deploy
controls consistently & seamlessly

Regulatory Compliance
Churn & Governance

Growing Attack Surface& Threat LandscapeWith the migration of workloads to
the Cloud, Security, andcompliance are top-of-mind
across hybrid multi-cloudenvironments

Growing threats, tools and data
inhibit security operations acrosshybrid environments

Securing the hybrid enterprise requires a comprehensive cloudsecurity program
01

Defining and implementing a Cloud
Security Strategy

Comprehensive, Consistent & Zero Trust Centric

02 Enforcing policies to protect cloudresources
03 Ensuring security posture &compliance needs are continually met
04 Centralizing detection & response tothreats 24x7

IBM Security / © Copyright IBM Corporation 2022

Identity

Users & Context

Workloads

Endpoints & Platforms

Data

Data & Applications

NetworkNetwork & Edge

IBM Security Services for Cloud Services Framework
Services &Delivery
ModelsAdvisory

NIST CSF Alignment

Identify••

Integration

Cloud Security Assessment
Cloud Security Strategy•••

Secure Architecture
Foundations
DevSecOpsCloud IAMProtectManaged••

Retainer

Cloud Native Security Services
Cloud, SaaS Posture andWorkload Protection

Detect, Respond•••

Tailored

Secure Cloud Foundations
X-Force Incident Response
Post Breach Response•Address customer specificHybrid Cloud requirements

Recover

Zero Trust for
Hybrid Cloud
Identities

Data

Applications

Workloads

Networking

DevSecOps

Hybrid Clouds
SecuredIBM Services
Platform

IBM Security / © Copyright IBM Corporation 2022

DIGITAL
USER
EXPERIENCECOMPREHENSIVESECURITYOPERATIONSDATAINGESTION &ENRICHMENTCOGNITIVE
ANALYTICS

CLOUD WORKLOAD PROTECTION|VALUE PROP

Defining and enforcing security and compliance policies toyour cloud workloads regardless of where they are running

Protect Cloud
Workloads

Key Delivery Activities

Current State Assessment andRoadmap

Detailed design of cloud workload
architectureContinuous policy and threat
mgmt. & vulnerability ranking

Current state of Kubernetes and/or
OpenShift security controls andapplication security requirements- Assessment of the existing
environments to understand cloud
workload needs and define proper
workload-centric security policies- Implement and harden cloud
workloads based on defined roadmap- Continuously monitor, detect,
triage, and respond to security
alerts, and threat.

Protection of Cloud
Workloads- Review of VMs, containers orserverless controls

Security Policies Alignedwith Acceptable Risk Level

Design and implementation ofcloud workload security
technologies and policies- Define a future-state roadmap
according to your risk appetite- Harden OpenShift native securitycontrols
and/or implement 3rd party solutions
tobetter protect your cloud workloads.

CloudWorkload
Protection
IBM Security / © Copyright IBM Corporation 2022

- Provide/deploy recommendations
on policy updates based on app orbusiness needs.
- IBM X-Force RedTM driven
vulnerability ranking andprioritization

Continuous Threat
Management

Steady-state management ofsecurity policies, vulnerabilities
and threats- Automated threat mgmt. using
IBM X-Force Protection platform

Deliverables- Current state assessment reportwith observations,recommendations and roadmap- Solution and Reference Architecture

2-4 Weeks

4-6 Weeks- Integration plan and Report- Vulnerability, runtime andcompliance reports

Ongoing

CLOUD WORKLOAD PROTECTION|DELIVERABLES

Protect Cloud
Workloads

Manage & Respond to Container Threats

Review & Remediate Container Vulnerabilities

Current state of Kubernetes and/orOpenShift security controls andapplication security requirements

Design & implementation of cloud
workload security technologies
and policies

Steady-state management ofsecurity policies, vulnerabilities
and threats

CloudWorkloadProtection
IBM Security / © Copyright IBM Corporation 2022

Free Trial Container Security Dashboard

CLOUD WORKLOAD PROTECTION|CASE STUDY

MultinationalTechnology
2021

IBM Cloud

The Client Challenge:

The IBM Solution:- Customer provides internal services tomultiple customer accounts by leveraging aDevSecOps OpenShift platform

The IBM SSC managed solution helps toenhance the customer’s visibility andprotection capabilities across their hybrid
cloud container workloads (on-prem and IBMCloud) on more than 250 worker nodes- Provides support for commercial accounts
through automating DevOps pipelinecontrols
The Bottom Line:
Customer met with specific compliancerequirements where they needed to getenhanced visibility over their container
deployments in order to improve the overall
security posture of their enterprise platform

Our solution also helped with design,
implementation and management of thecontainer security policies based on specificcustomer compliance requirements
Additional automated threat management
capabilities provided that will help detect andrespond to any container security events(vulnerabilities, attacks, compliance policies
creation, etc.)
Additional Vulnerability Ranking services
provided to help detect and prioritize
vulnerabilities based on IBM Security’s
proprietary algorithm

CloudWorkload
Protection
IBM Security / © Copyright IBM Corporation 2022

Unified Client Interface

TalentServices

Security Architects
Security Engineers
Security Analysts

Integrated platform+ best in class tools+ Real time security
insights + Secureenvironment

TechnologyIBM Security Verify
IBM X-Force Protection Platform
IBM CloudPak for Security– Single Interface– Insights

Cloud SecurityAssessment

Cloud SecureFoundations– Rapid Deployment– AI based Insights
HybridMulticloudEnvironment

On-premises

Cloud Security
StrategyManaged Cloud Security Services (IaaS / PaaS / SaaS)

Cloud
Security PostureManagement

SaaS
Security PostureManagement

CloudWorkload
Protection

Threat Management– Secure Environment– Automation

Cloud Consulting & System Integration Services

Cloud COC<< Hybrid Cloud Security Management >>Security Services
delivered througha unifiedexperience

CloudNativeControlsGet to value faster witha strong enterprisecloud security partner

Microsoft Azure Cloud certified professionals
across the globe-

Consulting & Systems Integration-

Managed Security Services-Solution Design-

Product Management & Engineering

Vendor and cloud agnostic expertise & support
MicrosoftGoldConsulting
Partner-Multi-cloud managed security services providing centralized
visibility, management, and monitoring of security operations
across hybrid environments.

-Built on an ecosystem of best-of-breed security technologies,
spanning cloud-native & 3rd party.

Comprehensive support for hybrid multi-cloud

IBM Security / © Copyright IBM Corporation 2022

-Leading portfolio of comprehensive cloud strategy & risk
consulting capabilities coupled with strong security strategy,
integration & operations expertise.

-Recognized by leading analyst firms as leader in MSSP space.
Known for deep cloud relevant innovation and comprehensive
threat management services.

NEED
REVIEW

Next Steps
12

3

Take our free Quick
Cloud Security SelfAssessment

Sign up for our deepdive Rapid Cloud
Security Assessment

Learn more
about our Security
Services for Cloud

ibm.biz/cloud-sec-maturity<TBD>

https://ibm.com/security/services/ cloudsecurity-services

IBM Security / © Copyright IBM Corporation 2022

10

Thank you

Follow us on:
ibm.com/security
securityintelligence.com
ibm.com/security/community
xforce.ibmcloud.com@ibmsecurity
youtube.com/ibmsecurity© Copyright IBM Corporation 2022. All rights reserved. The information contained in these materials is provided for
informational purposes only, and is provided AS IS without warranty, of any kind, express or implied. Any statement ofdirection represents IBM’s current intent, is subject to change or withdrawal, and represent only goals and objectives. IBM,the IBM logo, and other IBM products and services are trademarks of the International Business Machines Corporation, in
the United States, other countries or both. Other company, product, or service names may be trademarks or service marksof others.
Statement of Good Security Practices: IT system security involves protecting systems and information through prevention,
detection and response to improper access from within and outside your enterprise. Improper access can result in
information being altered, destroyed, misappropriated or misused or can result in damage to or misuse of your systems,
including for use in attacks on others. No IT system or product should be considered completely secure and no single
product, service or security measure can be completely effective in preventing improper use or access. IBM systems,
products and services are designed to be part of a lawful, comprehensive security approach, which will necessarily involve
additional operational procedures, and may require other systems, products or services to be most effective. IBM does notwarrant that any systems, products or services are immune from, or will make your enterprise immune from, the malicious
or illegal conduct of any party.