{"id":6072,"date":"2023-08-15T09:01:06","date_gmt":"2023-08-15T13:01:06","guid":{"rendered":"https:\/\/solutionsreview.com\/backup-disaster-recovery\/?p=6072"},"modified":"2023-08-15T09:03:12","modified_gmt":"2023-08-15T13:03:12","slug":"multi-cloud-data-protection-best-practices-for-cyber-resilience","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/backup-disaster-recovery\/multi-cloud-data-protection-best-practices-for-cyber-resilience\/","title":{"rendered":"Multi-Cloud Data Protection Best Practices for Cyber Resilience"},"content":{"rendered":"

\"\"<\/p>\n

Solutions Review\u2019s <\/strong><\/i>Contributed Content Series<\/u><\/strong><\/i><\/a> is a collection of contributed articles written by thought leaders in enterprise technology. In this feature, Panzura<\/a> CISO Katie McCullough offers multi-cloud data protection best practices for cyber resilience.<\/strong><\/i><\/span><\/p>\n

A few years ago, we were knocking on the door of multi-cloud architecture. Today, it\u2019s the norm. Businesses are now realizing the seemingly endless benefits of combining private and public cloud solutions into one single cloud adoption strategy \u2014 from avoiding vendor lock-ins and cutting costs, to increasing agility and developing a cloud experience that aligns more closely with a company\u2019s specific needs. According to Gartner, more than half of all enterprise IT spending will shift to the cloud by 2025, much of it on distributed cloud architectures that span on-premises, edge servers, and private and public cloud solutions.<\/p>\n

Agility is one thing, but there\u2019s an inherent risk to storing data across multiple cloud providers and on-premises infrastructure. More data in more environments typically means less visibility and a need to juggle multiple out-of-sync data \u201cislands\u201d for backups and day-to-day processes. So how can businesses ensure that the integrity and security of their data remains consistent when stored in a distributed cloud environment?<\/p>\n

\t\t\t

<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div><\/span><\/p>\n

Multi-Cloud Data Protection Best Practices<\/strong><\/h2>\n

3 Tenants of Cloud Security<\/strong><\/h3>\n

The effectiveness of any cloud-based data storage solution is best measured against three core tenants \u2013 confidentiality, integrity, and availability. Confidentiality is absolutely critical to maintaining data security, enforcing the principle of \u201cleast privilege\u201d to ensure that only employees that need to access data to carry out their duties have access. No employee, regardless of seniority, should be given blanket access to an organization\u2019s data \u2013 not necessarily because they can\u2019t be trusted, though inside threats are most certainly a risk \u2014 but because they become a potential vector for breaches. The smaller the pool of individuals with access to certain datasets, the less vulnerable those datasets are when it comes to cyber threats and potential data theft or loss.<\/p>\n

The integrity of data also needs to be maintained to ensure business continuity and productivity. When we talk about the integrity of data, we\u2019re referring to the reliability and trustworthiness of that data throughout its entire lifecycle \u2014 if at any point data becomes desynchronized, outdated, or incorrect in the multiple cloud environments in which it is stored, it loses value and can lead to further problems and frustrations. Systems need to be able to check and validate data continuously to ensure that its integrity is maintained and productivity remains constant. The third tenant is availability. Do the right areas of the business have access to the right data at the right time? Balancing availability with confidentiality and integrity is one of the greatest challenges in cloud data security, but it\u2019s not insurmountable if security teams ask the right questions when looking at multi-cloud solution options.<\/p>\n

Preparing for Multi-Cloud Data Storage<\/strong><\/h3>\n

Before going ahead with a multi-cloud storage strategy, security teams need to first assess their needs around data security. This assessment is best carried out by considering what, who, and how. When thinking about the \u201cwhat\u201d of data, security teams need to break down and categorize their data in terms of its storage and security needs. Is it highly confidential information within the business? Is it sensitive customer information? Are there any governmental regulations around the data being kept, such as PCI DSS for payment information or HIPAA when it comes to health records? This will allow security teams to outline the right security specification for the cloud strategy they adopt.<\/p>\n

The \u201cwho\u201d is all about who needs access to the data. Some data might need to be accessible to all users, such as basic customer records or supplier information. Some customers may even need access to data, when they log into a customer portal or access a service-based app for instance. Some data will be more specialized, with only engineers, financial controllers, or certain business units requiring access. Assessing who needs access to what data will help security teams map their data to the right cloud environment, be it private, public, or on-premises.<\/p>\n

Next is the \u201chow\u201d \u2014 how will users access the data? Some data might be best accessed directly through file-sharing, whereas other sets of data may be shared via multiple applications and interfaces which will require the use of APIs to \u201ccommunicate\u201d with the cloud. Different data delivery and access methods will have different security challenges, so it\u2019s good to assess how data is going to need to be accessed before adopting a multi-cloud adoption strategy. Access to data and certain applications can then be governed by best-practices such as multi-factor authentication to validate the identity of users.<\/p>\n

The Importance of Data Encryption & Sovereignty<\/strong><\/h3>\n

Once a multi-cloud strategy is in place, it\u2019s then about deploying security controls and practices to maintain a baseline level of security. Perhaps the best example of this is data encryption, which has become a common practice in the transmission of data and will be built into the majority of solutions. Nevertheless, it\u2019s important to understand how data is being encrypted, and make sure that it is being encrypted \u201cat rest\u201d as well as in transit. It\u2019s also important for security teams to look at how cryptographic keys are being handled, whether it\u2019s the service provider or the cloud provider handling them, and the level of encryption they represent. This is particularly important when it comes to compliance with regulatory standards like PCI DSS or HIPAA, where data may need to be encrypted and protected to a certain level.<\/p>\n

One of the primary benefits of multi-cloud environments is the ability to choose different cloud providers for different services. This provides flexibility, cost savings, and access to specialized services. However, this approach also makes it difficult to maintain control over data, particularly if that data is spread across different cloud providers. This creates challenges in terms of compliance, security, and data protection that will need to be addressed with a clear data sovereignty strategy. This will involve identifying the locations where data will be stored, understanding the data protection and privacy laws in those locations, and ensuring that data is stored and processed in compliance with those laws. This is far more complex than in an on-premises environment, where regulations are only governed by the type of data being stored rather than the location in which the data is being kept.<\/p>\n

Putting Security Controls in Place<\/strong><\/h3>\n

One of the basic security control checklist items for multi-cloud data security is maintaining an inventory of all cloud services used by the organization. This helps to ensure that all services are secure, and that any potential security issues can be addressed in a timely manner. Additionally, incident response planning should be established to ensure that the organization is prepared to respond to security incidents.<\/p>\n

Naturally, any third-party interactions also pose a significant risk to multi-cloud data security. Security teams need to ensure that they have clear and established security policies and procedures for third-party vendors and that they are compliant with any applicable regulations or standards. Change management is also important to ensure that any changes to the cloud environment are thoroughly tested and validated to prevent security vulnerabilities from materializing in the future. Data disposal is another checklist item, ensuring any data that is no longer needed is disposed of securely. Cloud storage providers should be able to give a detailed breakdown of how they dispose of redundant data so it doesn\u2019t fall into the wrong hands or breach compliance regulations.<\/p>\n

Before selecting cloud service providers as part of a multi-cloud storage strategy, all of the above needs to be considered. It\u2019s important to know where responsibility for the security, encryption, and compliant handling of data starts and ends \u2014 some of this will be the service provider\u2019s responsibility and some of it will come down to the organization itself. Interrogating service level agreements (SLAs) will reveal this in greater detail, as well as outline what the service provider aims to provide, from response times and recovery times to how data is stored and what downtime \u2014 if any \u2014 is deemed acceptable.<\/p>\n

Multi-cloud data storage is an incredibly useful way to minimize spending, maintain compliance, and generally improve the handling and availability of data, but only if the right solutions are selected and implemented in the right way. Data security should never be assumed and is never guaranteed.<\/p>\n

\t\t\t

\"Download<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

Solutions Review\u2019s Contributed Content Series is a collection of contributed articles written by thought leaders in enterprise technology. In this feature, Panzura CISO Katie McCullough offers multi-cloud data protection best practices for cyber resilience. A few years ago, we were knocking on the door of multi-cloud architecture. Today, it\u2019s the norm. Businesses are now realizing […]<\/p>\n","protected":false},"author":622,"featured_media":6074,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[1],"tags":[1301,1015],"acf":[],"yoast_head":"\nMulti-Cloud Data Protection Best Practices for Cyber Resilience<\/title>\n<meta name=\"description\" content=\"In this feature, Panzura CISO Katie McCullough offers multi-cloud data protection best practices for cyber resilience.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/backup-disaster-recovery\/multi-cloud-data-protection-best-practices-for-cyber-resilience\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Katie McCullough\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/backup-disaster-recovery\/multi-cloud-data-protection-best-practices-for-cyber-resilience\/\",\"url\":\"https:\/\/solutionsreview.com\/backup-disaster-recovery\/multi-cloud-data-protection-best-practices-for-cyber-resilience\/\",\"name\":\"Multi-Cloud Data Protection Best Practices for Cyber Resilience\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/backup-disaster-recovery\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/backup-disaster-recovery\/multi-cloud-data-protection-best-practices-for-cyber-resilience\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/backup-disaster-recovery\/multi-cloud-data-protection-best-practices-for-cyber-resilience\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/backup-disaster-recovery\/files\/2023\/08\/Multi-Cloud-Data-Protection-Best-Practices.jpg\",\"datePublished\":\"2023-08-15T13:01:06+00:00\",\"dateModified\":\"2023-08-15T13:03:12+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/backup-disaster-recovery\/#\/schema\/person\/065121bfffaa9e2ea37f30a92a0cbac3\"},\"description\":\"In this feature, Panzura CISO Katie McCullough offers multi-cloud data protection best practices for cyber resilience.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/backup-disaster-recovery\/multi-cloud-data-protection-best-practices-for-cyber-resilience\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/backup-disaster-recovery\/multi-cloud-data-protection-best-practices-for-cyber-resilience\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/backup-disaster-recovery\/multi-cloud-data-protection-best-practices-for-cyber-resilience\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/backup-disaster-recovery\/files\/2023\/08\/Multi-Cloud-Data-Protection-Best-Practices.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/backup-disaster-recovery\/files\/2023\/08\/Multi-Cloud-Data-Protection-Best-Practices.jpg\",\"width\":800,\"height\":400},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/backup-disaster-recovery\/multi-cloud-data-protection-best-practices-for-cyber-resilience\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/backup-disaster-recovery\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Multi-Cloud Data Protection Best Practices for Cyber Resilience\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/backup-disaster-recovery\/#website\",\"url\":\"https:\/\/solutionsreview.com\/backup-disaster-recovery\/\",\"name\":\"Solutions Review Backup and Disaster Recovery\",\"description\":\"BDR Software Evaluation: Ransomware Recovery, Cloud Backup & Vendor Showcases\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/backup-disaster-recovery\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/backup-disaster-recovery\/#\/schema\/person\/065121bfffaa9e2ea37f30a92a0cbac3\",\"name\":\"Katie McCullough\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/backup-disaster-recovery\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/bc178610178c2c92bce57fa158f6f546?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/bc178610178c2c92bce57fa158f6f546?s=96&d=mm&r=g\",\"caption\":\"Katie McCullough\"},\"description\":\"Katie is the Chief Information Security Officer at Panzura. She is responsible for security and compliance for the company and customers alike. Katie has more than 25 years of experience executing and leading security operations, compliance, managed services, and cloud solutions. During her time working for industry-leading companies OneNeck IT Solutions and CDW\/Berbee, Katie has time and again proven her strategic leadership in creating secure IT environments that enable businesses to run, grow, and transform.\",\"url\":\"https:\/\/solutionsreview.com\/backup-disaster-recovery\/author\/kmccullough\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Multi-Cloud Data Protection Best Practices for Cyber Resilience","description":"In this feature, Panzura CISO Katie McCullough offers multi-cloud data protection best practices for cyber resilience.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/backup-disaster-recovery\/multi-cloud-data-protection-best-practices-for-cyber-resilience\/","twitter_misc":{"Written by":"Katie McCullough","Est. reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/backup-disaster-recovery\/multi-cloud-data-protection-best-practices-for-cyber-resilience\/","url":"https:\/\/solutionsreview.com\/backup-disaster-recovery\/multi-cloud-data-protection-best-practices-for-cyber-resilience\/","name":"Multi-Cloud Data Protection Best Practices for Cyber Resilience","isPartOf":{"@id":"https:\/\/solutionsreview.com\/backup-disaster-recovery\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/backup-disaster-recovery\/multi-cloud-data-protection-best-practices-for-cyber-resilience\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/backup-disaster-recovery\/multi-cloud-data-protection-best-practices-for-cyber-resilience\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/backup-disaster-recovery\/files\/2023\/08\/Multi-Cloud-Data-Protection-Best-Practices.jpg","datePublished":"2023-08-15T13:01:06+00:00","dateModified":"2023-08-15T13:03:12+00:00","author":{"@id":"https:\/\/solutionsreview.com\/backup-disaster-recovery\/#\/schema\/person\/065121bfffaa9e2ea37f30a92a0cbac3"},"description":"In this feature, Panzura CISO Katie McCullough offers multi-cloud data protection best practices for cyber resilience.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/backup-disaster-recovery\/multi-cloud-data-protection-best-practices-for-cyber-resilience\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/backup-disaster-recovery\/multi-cloud-data-protection-best-practices-for-cyber-resilience\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/backup-disaster-recovery\/multi-cloud-data-protection-best-practices-for-cyber-resilience\/#primaryimage","url":"https:\/\/solutionsreview.com\/backup-disaster-recovery\/files\/2023\/08\/Multi-Cloud-Data-Protection-Best-Practices.jpg","contentUrl":"https:\/\/solutionsreview.com\/backup-disaster-recovery\/files\/2023\/08\/Multi-Cloud-Data-Protection-Best-Practices.jpg","width":800,"height":400},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/backup-disaster-recovery\/multi-cloud-data-protection-best-practices-for-cyber-resilience\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/backup-disaster-recovery\/"},{"@type":"ListItem","position":2,"name":"Multi-Cloud Data Protection Best Practices for Cyber Resilience"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/backup-disaster-recovery\/#website","url":"https:\/\/solutionsreview.com\/backup-disaster-recovery\/","name":"Solutions Review Backup and Disaster Recovery","description":"BDR Software Evaluation: Ransomware Recovery, Cloud Backup & Vendor Showcases","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/backup-disaster-recovery\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/backup-disaster-recovery\/#\/schema\/person\/065121bfffaa9e2ea37f30a92a0cbac3","name":"Katie McCullough","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/backup-disaster-recovery\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/bc178610178c2c92bce57fa158f6f546?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/bc178610178c2c92bce57fa158f6f546?s=96&d=mm&r=g","caption":"Katie McCullough"},"description":"Katie is the Chief Information Security Officer at Panzura. She is responsible for security and compliance for the company and customers alike. Katie has more than 25 years of experience executing and leading security operations, compliance, managed services, and cloud solutions. During her time working for industry-leading companies OneNeck IT Solutions and CDW\/Berbee, Katie has time and again proven her strategic leadership in creating secure IT environments that enable businesses to run, grow, and transform.","url":"https:\/\/solutionsreview.com\/backup-disaster-recovery\/author\/kmccullough\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/backup-disaster-recovery\/wp-json\/wp\/v2\/posts\/6072"}],"collection":[{"href":"https:\/\/solutionsreview.com\/backup-disaster-recovery\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/backup-disaster-recovery\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/backup-disaster-recovery\/wp-json\/wp\/v2\/users\/622"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/backup-disaster-recovery\/wp-json\/wp\/v2\/comments?post=6072"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/backup-disaster-recovery\/wp-json\/wp\/v2\/posts\/6072\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/backup-disaster-recovery\/wp-json\/wp\/v2\/media\/6074"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/backup-disaster-recovery\/wp-json\/wp\/v2\/media?parent=6072"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/backup-disaster-recovery\/wp-json\/wp\/v2\/categories?post=6072"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/backup-disaster-recovery\/wp-json\/wp\/v2\/tags?post=6072"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}