Malicious agents are moving faster than the speed of business. Even more worrisome, most companies are relying on legacy approaches to security that are no longer capable of meeting current threats. Don’t let the myths that surround cloud security impede your business vision, progress and outcomes. Because the fact is, today’s lingering myths are based on yesterday’s standards. This webinar presentation features Paul Mazzucco, Chief Security Officer, separating fact from fiction, debunking the four most insidious myths, and advising on the best course of action to address each.

1. Cloud Security Myths
Paul Mazzucco, Chief Security Officer

2. Copyright© 2015 TierPoint, LLC. All rights reserved.
>Yesterday’s standards:
today’s security myths
>Cloud security: an
ongoing mandate
>Actions to take now
Discussion Points

3. Copyright© 2015 TierPoint, LLC. All rights reserved.
Channels used …
90% of Businesses
Breached in Last 10 Years
> Bring Your Own Device (BYOD)
 60% allow / 40% formal policy
> Bring Your Own Cloud (BYOC)
 45% apps / 22% visible to IT
> Malicious Hackers
 60% financial gain / 25% IP
US hits record high of 783
data breaches in 2014

4. Copyright© 2015 TierPoint, LLC. All rights reserved.
(Almost) Daily Headlines
> Data Belonging to 1.1 Million
CareFirst Customers Stolen in
Cyber Attack (May 2015)
> US Regulators Warn of Cyber
Threat to Financial System
(May 2015)
4
> FBI Warns US
Companies of Cyber
Terror (April 2015)

5. Copyright© 2015 TierPoint, LLC. All rights reserved.
Cyber security threats according to risk mitigation priority
10 = Highest Priority to 1 = Lowest Priority
2.8
3.0
3.2
5.4
6.4
7.7
7.9
8.2
8.6
9.0
0.0 1.0 2.0 3.0 4.0 5.0 6.0 7.0 8.0 9.0 10.0
Phishing and social engineering
Web scrapping
Cross site scripting
Malicious insiders
Botnets
Malware
Viruses, worms and trojans
Distributed denial of service (DDoS)
Server side injection
Denial of service (DoS)
Multiple Cyber Security Threats

6. Copyright© 2015 TierPoint, LLC. All rights reserved.
Cloud Security Myths
> Data in the cloud is less
secure than data in traditional
brick & mortar datacenter
> Security can be dealt with
after the fact
> Using any cloud provider with
the right certs guarantees
protection
> Once it’s set up, you can
leave it alone
6

7. Copyright© 2015 TierPoint, LLC. All rights reserved.
Cloud providers’ core
expertise
Built into the business
model, ground up
Offer many more
layers of security
28% fewer genuine
attacks, threats
F
A
C
T
S
Myth 1:
Data is Less Secure in Cloud

8. Copyright© 2015 TierPoint, LLC. All rights reserved.
Myth 2:
Deal With it After the Fact
Cloud
Environment
• Network architecture
• Provisioning
• Deployment
• Scaling
Needs
Impact
Security
• Your industry
• Your data needs
• Your business practices
• Your customers’ needs
Security is infrastructural, planning through execution
F
A
C
T
S

9. Copyright© 2015 TierPoint, LLC. All rights reserved.
> Compliance doesn’t ensure security
 Overlap: Yes
 Same: No
> Compliance: state of security at specific
moment in time
 Error between audits
 Humans vs. automation
> Actions
 Independent audits, SLAs
 Public vs. private cloud
Myth 3:
Certs Guarantee Protection
F
A
C
T
S

10. Copyright© 2015 TierPoint, LLC. All rights reserved.
> Certs & audit are a beginning
 Not culmination
> Yesterday’s technology
 Perimeter-focused
> Today’s threats require
 Multi-layered approach
 Advanced detection
 Real-time admin alerts
Myth 4:
Set it and Forget It
F
A
C
T
S

11. Copyright© 2015 TierPoint, LLC. All rights reserved.
Actions to Take
> Cloud Security Alliance (CSA)
 Consensus Assessment
Initiative Questionnaire
 CSA Cloud Controls Matrix
> Independent audits
 3rd party testing of providers’
infrastructure
> Services secured to common
standard
 Transparent and auditable

12. Copyright© 2015 TierPoint, LLC. All rights reserved.
TierPoint Cloud
12
• Secure
• Flexible
• Scalable
• Cost Efficient
PRIVATE
• Dedicated Environment
• Customized Storage,
Computing, Security &
other Components
• Utilize & Colocate
Your Own Equipment
or Outsource as
Fully Managed
MULTI-TENANT
• Secure, Enterprise
Architected Service
• Cost Efficient, Flexible
• Dedicated Resources
RECOVERY
• Built to Spec for
Customer RPOs
& RTOs
• Virtual Resources
Upon Demand During
a Disaster
• IP Vaulting, Tape,
or Disk Backup
HYBRID
• Seamless Integration
with Colocation
Environments
• Secure, Enterprise
Services
• Cost-efficient
• Scalable
 Built to meet critical security, performance and
reliability requirements
 Full suite of custom-configured virtualization services
powered by industry-leading VMware technology