IBM Security Services for Cloud

Protecting the hybrid multi-cloud

Presenter’s nameTitle

Cloud hasturned traditional
cybersecurity on its
head99%of cloud security
failures will be theorganization’s fault$474
BillionGlobal Cloud
Revenue to Total$474 Billion in
2022*

$3.8M

~ ½

Global average
cost of a data
breachof world’s stored
data expected toreside in public
cloud by 2025

IBM Security / © Copyright IBM Corporation 2022
* Source: Gartner, November 10, 2021.

UnanticipatedAcceleration to Cloud

Disparate Controls &Decentralized Management

Pandemic accelerated changeand demand to allow users toaccess the enterprise fromanywhere using any device

New computing approaches, including
Edge & multi-cloud, require robust
security platforms that can deploy
controls consistently & seamlessly

Regulatory Compliance
Churn & Governance

Growing Attack Surface& Threat LandscapeWith the migration of workloads to
the Cloud, Security, andcompliance are top-of-mind
across hybrid multi-cloudenvironments

Growing threats, tools and data
inhibit security operations acrosshybrid environments

Securing the hybrid enterprise requires a comprehensive cloudsecurity program
01
Defining and implementing a Cloud
Security Strategy

Comprehensive, Consistent & Zero Trust Centric

Identity

Users & Context

Data

Data & Applications

02
Enforcing policies to protect cloud
resources
03
Ensuring security posture &compliance needs are continually met
04
Centralizing detection & response tothreats 24x7

IBM Security / © Copyright IBM Corporation 2022

Workloads

Endpoints & Platforms

Network

Network & Edge

IBM Security Services for Cloud Services Framework
Services &Delivery
ModelsAdvisory

NIST CSF Alignment

Identify••

Integration

Cloud Security Assessment
Cloud Security Strategy•Secure Cloud Foundations

ProtectManaged••

RetainerCloud Native Security Services
Cloud, SaaS Posture andWorkload Protection

Detect, Respond•••

Tailored

Secure Cloud Foundations
X-Force Incident Response
Post Breach Response•Address customer specificHybrid Cloud requirements

Recover

Zero Trust for
Hybrid Cloud
Identities

Data

Applications

Workloads

Networking

DevSecOps

Hybrid Clouds
SecuredIBM Services
Platform

IBM Security / © Copyright IBM Corporation 2022

DIGITAL
USER
EXPERIENCECOMPREHENSIVESECURITYOPERATIONSDATAINGESTION &ENRICHMENTCOGNITIVE
ANALYTICS

CLOUD SECURITY STRATEGY|VALUE PROP

Strategy andRoadmap
Development
End-to-End Visibility

Visibility into current state cloud
configuration and mitigation steps
to address cloud compliance gaps

Enhanced Governance with
Actionable Reporting

Review cloud security maturity inalignment with business goals andenterprise governance framework

Efficient Operations

Develop target operating modeland prioritized implementation
roadmap for securing cloud

Innovative Approach

Build innovative businesssolutions and next-generation
business processes at scale

Cloud
Security
Strategy
IBM Security / © Copyright IBM Corporation 2022

Assess, align, and implement the security strategy designed tomeet the organization’s business, security and compliance goalsKey Delivery Activities

Rapid Cloud
Assessment

Advanced Current State
Assessment

Security Strategyand PlanSolution
Implementation- Review cloud
configuration,compliance and network
activity- Review scan reports andassess security postureand maturity tailored as
per industry/geos- Identify gaps anddevelop conceptual
target state- Scan posture of security
controls and up-to 5compliance frameworks- Align cloud usage tobusiness goals andenterprise governanceframework- Review security
strategy and plan todefine accelerated
deployment andmigration options- Define priority projects- Create cloud securitystrategy plan, androadmap- Implement security
initiatives

Deliverables- Executive Review- Detailed remediation
actions to harden cloudsecurity controls- Current state findings
report and next step
recommendations- Security controls andworkload sensitivity map- Cloud security maturity
ratings- Target state conceptual
views- Project definitions andprioritization- High-level roadmap

2 Weeks

2-4 Weeks8-10 Weeks- Customized
deliverables based onclient needs andproject objectives- Implementation andgovernance of cloudsecurity initiatives

12+ Weeks

CLOUD SECURITY STRATEGY|CASE STUDYThe Client Challenge:

The IBM Solution:- Customer in process of modernizing theirflight systems to a multi cloud architecture.

Our team was able to partner with thesoftware team to work directly on security for
an important customer cloud application.

- Before transitioning, they must understandthe security risks being faced by the newmulti cloud systems, along withconnections to third party partners.
Distribution - Airline

2021

Microsoft Azure, hybrid
cloud

Cloud Security Strategy
Cloud Security Threat Modeling& Architecture Analysis

IBM Security / © Copyright IBM Corporation 2022- Developing a cloud native application brings
a new approach and mindset shift, which
can leave various security risks to arise.
- Additionally, they needs to understand theircurrent state security posture to understandwhere there can improve the new flightsystem application.
The Bottom Line: :Customer facing lack of understanding ofcurrent threats, developing new cloud nativeapplications securely, and working withmultiple third-party connections.

IBM Security Services for Cloud capabilities
and experience working with previous
customers helped the customer applicationteam understand their current threatlandscape.
The importance and demonstration provided
by the IBM team of conducting a threat
modelling exercise to remediate low hanging
fruit before moving to production, helped drive
confidence for the customer moving forward.

CLOUD SECURITY STRATEGY|CASE STUDY

Multinational RetailApparel
2021

Microsoft Azure andhybrid cloud

Cloud Security Strategy
Rapid Cloud Security
Assessment

IBM Security / © Copyright IBM Corporation 2022

The Client Challenge:

The IBM Solution:

Customer had over 31K unique resources,
across 18 cloud accounts/subscriptions,
across 2 different cloud environments

The IBM SSC team conducted a rapid cloudsecurity assessment against the customer’senvironment and covering their 31K+ cloud
resources.

The Bottom Line:
Customer needed to quickly assess thecurrent implementation of their MicrosoftAzure and hybrid cloud environments for cloud
inventory, safe configurations, and compliancevisibility

Safe configuration and compliance checks
were ran against the onboarded accounts, anda follow-up review with key customer
stakeholders across the regions was held todiscuss preliminary findings
Validated assessment results and prepared
final findings summary and detailed report
included remediation recommendations weresubmitted by region for final review

Get to value faster witha strong enterprisecloud security partner

Microsoft Azure Cloud certified professionals
across the globe-

Consulting & Systems Integration-

Managed Security Services-

Solution Design-

Product Management & Engineering

Vendor and cloud agnostic expertise & support
MicrosoftGold
Consulting
Partner-

Multi-cloud managed security services providing centralized
visibility, management, and monitoring of security operations
across hybrid environments.

-Built on an ecosystem of best-of-breed security technologies,
spanning cloud-native & 3rd party.

Comprehensive support for hybrid multi-cloud

IBM Security / © Copyright IBM Corporation 2022

-Leading portfolio of comprehensive cloud strategy & risk
consulting capabilities coupled with strong security strategy,integration & operations expertise.

-Recognized by leading analyst firms as leader in MSSP space.
Known for deep cloud relevant innovation and comprehensive
threat management services.

NEED
REVIEW

Next Steps
1
Take our free Quick
Cloud Security SelfAssessment
ibm.biz/cloud-sec-maturity

IBM Security / © Copyright IBM Corporation 2022

2Sign up for our deepdive Rapid Cloud
Security Assessment

3
Learn more
about our Security
Services for Cloud
https://ibm.com/security/services/ cloudsecurity-services

9Thank you

Follow us on:
ibm.com/security
securityintelligence.com
ibm.com/security/community
xforce.ibmcloud.com@ibmsecurity
youtube.com/ibmsecurity© Copyright IBM Corporation 2022. All rights reserved. The information contained in these materials is provided for
informational purposes only, and is provided AS IS without warranty, of any kind, express or implied. Any statement ofdirection represents IBM’s current intent, is subject to change or withdrawal, and represent only goals and objectives. IBM,the IBM logo, and other IBM products and services are trademarks of the International Business Machines Corporation, inthe United States, other countries or both. Other company, product, or service names may be trademarks or service marksof others.
Statement of Good Security Practices: IT system security involves protecting systems and information through prevention,detection and response to improper access from within and outside your enterprise. Improper access can result in
information being altered, destroyed, misappropriated or misused or can result in damage to or misuse of your systems,
including for use in attacks on others. No IT system or product should be considered completely secure and no single
product, service or security measure can be completely effective in preventing improper use or access. IBM systems,
products and services are designed to be part of a lawful, comprehensive security approach, which will necessarily involve
additional operational procedures, and may require other systems, products or services to be most effective. IBM does notwarrant that any systems, products or services are immune from, or will make your enterprise immune from, the malicious
or illegal conduct of any party.