{"id":50407,"date":"2023-02-03T15:00:00","date_gmt":"2023-02-03T15:00:00","guid":{"rendered":"https:\/\/www.darkreading.com\/cloud\/how-the-cloud-is-shifting-ciso-priorities"},"modified":"2023-02-03T15:00:00","modified_gmt":"2023-02-03T15:00:00","slug":"how-the-cloud-is-shifting-ciso-priorities","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/how-the-cloud-is-shifting-ciso-priorities\/","title":{"rendered":"How the Cloud Is Shifting CISO Priorities"},"content":{"rendered":"
<\/div>\n

The challenges facing chief information security officers (CISOs) have evolved dramatically in the past decade. Today, <\/span>they must align their security efforts \u2014 and budgets \u2014 with the business goals of their organization, which may range from maintaining customer confidence that their data is safe to protecting intellectual property from theft.<\/p>\n

As a key member of the executive management team, CISOs often have board-level reporting responsibilities. They must manage a new and daunting level of technical complexity introduced by the cloud, where identities are virtually the first and last line of defense. And the job doesn’t end there. To be successful, they must also put substantial effort into building a team with skills in a variety of disciplines, and choosing the right defensive technologies.<\/p>\n

The Technical Challenge<\/h2>\n

The transition to remote or hybrid work models combined with accelerated cloud adoption has <\/span>greatly expanded the attack surface<\/a> CISOs must protect. Furthermore, they often have to deal with more than one cloud. The major providers \u2014 Amazon Web Services, Azure, and Google Cloud Platform \u2014 all have slightly different structures, procedures, requirements, and so on, all of which further increase the complexity of managing these <\/span>sprawling architectures.<\/p>\n

Data-center-oriented companies that have transitioned to the cloud obviously face a new set of security concerns that conventional firewalls were never designed to handle. Hence, th<\/span>e now commonly heard refrain “Identity is the new perimeter.” This is certainly true. While firewalls and other network-based controls shouldn’t be abandoned, CISOs need to focus on identity issues. The following three-step process can deliver results in this area quickly and efficiently.<\/span><\/p>\n