Shadow IT and Business Remediation Processes: End users are signing up for application services to solve business challenges. 

• Example of the challenge: An internal business unit team decides to collaborate with Evernote, but Microsoft OneNote is the company procured application service for this type of collaboration.  Has an employee subscribed to a paid version of Evernote?  What are the terms and conditions?  Is the IT department aware of this application’s use?  What corporate data is being shared in Evernote?  Is any of that data subject to compliance/regulatory mandates?  

• Cedrus + Netskope can help: We can help your business discover all cloud applications in use, measure them against corporate requirements and risk evaluation scores based upon values like compliance, data ownership, and encryption.  We can help your business establish operational processes to engage with business units to identify unsanctioned cloud applications and help them adopt sanctioned cloud applications.

Remote Workforce Security Management: End users working from home on corporate or personal devices, need access to business apps.

• Example of the challenge: Users are working from home more frequently than ever.  They need access to specific application services like Microsoft 365, Salesforce, and ServiceNow, which may have internal or confidential data.  Do we need to allow access to these services from non-corporate devices?  How do we protect internal or confidential data from being downloaded or migrated from our cloud app services?

• Cedrus + Netskope can help: We can help your business integrate identity and CASB technologies and create policies that prohibit specific actions based upon the device type, location, or other critical factors.  We can assist in creating policies that will detect data exfiltration attempts and block it or raise alerts for action.

Data Leakage Prevention (DLP) / Exfiltration Prevention: Internal, confidential, and regulated data can be involved in everyday use of documents and spreadsheets.

• Example of the challenge: Workers are extracting and uploading customer data in spreadsheets and documents.  Some of these may be destined to storage locations with the potential to share.  How do we prohibit this sensitive information from sharing to places that are unsanctioned/undesirable?

• Cedrus + Netskope can help: We can help your business implement policies that scan and protect sensitive data.  We can scan and protect data already in cloud storage that you’ve sanctioned, and we can scan data real-time in-line before it is written to cloud storage.  We can catch accidental leaks and prevent malicious insiders.  We can use this as an opportunity to coach users into where sensitive data should be stored and how to handle it.

Threat / Malware Detection and Prevention:

• Example of the challenge: Terabytes of data exist in cloud storage.  Files are being shared continuously.  New Malware/Ransomware is being released ongoing. How do we ensure that files/links coming in or going out do not contain Malware?  How do we integrate and orchestrate cloud based threat detection into the main NextGen AntiVirus solution?

• Cedrus + Netskope can help: We can help your business implement policies that scan and protect data both in cloud storage and as it is shared and used in-line, real-time in cloud application services.  Detection events can be integrated with endpoint security management systems like CrowdStrike and Carbon Black

Access Control for Cloud applications and Services

Acceptable Use Policy monitoring and enforcement

Data Classification and Tagging

Encryption, Key Management, and Bring-Your-Own-Key (BYOK) strategies