Where in the world is your Corporate data?
•
1 like•216 views
Your employees – and your company data – are on the go every day. As a result, your employees are relying on the use of 3rd party online services without IT approval – that is Shadow IT in your own organization. That’s some risky business. Where in the world is your Corporate Data? With TeraGo Cloud Drive we are giving you back control of your most valuable asset, your data. In this webinar you will learn about: How Shadow IT is picking up velocity due to the accessibility and ease of cloud applications Consequences of weak corporate security mechanisms How to give your IT department control of your data and its’ security
Recommended
More Related Content
What's hot
What's hot (20)
Similar to Where in the world is your Corporate data?
Similar to Where in the world is your Corporate data? (20)
More from Ashish Patel
More from Ashish Patel (16)
Recently uploaded
Recently uploaded (20)
Where in the world is your Corporate data?
- 1. © 2016 TeraGo Networks Inc. 1© 2016 TeraGo Networks Inc. 29 September 2016
- 2. © 2016 TeraGo Networks Inc. 2 Abstract Your employees – and your company data – are on the go every day. As a result, your employees are relying on the use of 3rd party online services without IT approval – that is Shadow IT in your own organization. That’s some risky business. Where in the world is your Corporate Data? With TeraGo Cloud Drive we are giving you back control of your most valuable asset, your data. In this webinar you will learn about: 1. How Shadow IT is picking up velocity due to the accessibility and ease of cloud applications 2. Consequences of weak corporate security mechanisms 3. How to give your IT department control of your data and its’ security
- 3. © 2016 TeraGo Networks Inc. 3 Logistics for today’s webinar • This webinar will be recorded and can be found on our website (www.terago.ca) • Please save your questions for the Q&A segment at the end of the webinar, but feel free to use the Questions box to type out your questions during the session. • Duration: 2:00-2:45 EST Q&A: 2:45-3:00 EST
- 4. © 2016 TeraGo Networks Inc. 4 Today’s Speaker Ashish Patel Director, Cloud & Data Centre Services TeraGo @pateltech https://ca.linkedin.com/in/ashishipatel
- 5. © 2016 TeraGo Networks Inc. 5 Corporat e HQ Where in the World is Your Corporate Data? Your employees – and corporate data – are on the move every day. 75 % 70% of employees using personal devices to access corporate data. of the workforce is mobile – avg. user has 3.3 connected devices. 53 seconds More than 50% of laptops stolen result in data breaches. Every 1 laptop is stolen. > 50% Attacks can happen in less than 2 seconds. of WiFi networks are susceptible to abuse. 50% Within the next 3-4 years. of corporate data will reside outside the corporate DC. Sources: Gartner, 2014. Slideshare.net. Tabtimes.com
- 6. © 2016 TeraGo Networks Inc. 6 Where in the World is Your Corporate Data? Your employees – and corporate data – are on the move every day. Corporat e HQ 72 % Even though 77% of companies prohibit this use. of employees use file sharing services for work purposes. 70 % Exacerbated by 66% of employees save corporate files on USB media. of sensitive information is lost on USB drives. Sources: Gartner, 2014. Slideshare.net. Tabtimes.com
- 7. © 2016 TeraGo Networks Inc. 7 Time to take a quick poll…
- 8. © 2016 TeraGo Networks Inc. 8 Corporat e HQ Cloud is Transforming The Enterprise • The cloud is challenging every aspect of how organizations deal with user file storage, collaboration, office storage and data protection • Organizations are now looking for smarter, less expensive tools that make them more agile IT-as- a-Service providers • Anymore, users are looking for apps and cloud-integrated services that redefine both economics and service levels in the enterprise Cloud Storage Home Directories NAS Data Protection Tape Yesterday Today File, Sync, & Share Branch Storage Servers Collaboration ECM Replace Legacy Servers Data Sovereignty Eliminate ‘Shadow IT’
- 9. © 2016 TeraGo Networks Inc. 9 Shadow IT Used without IT approval or policy applied.
- 10. © 2016 TeraGo Networks Inc. 10 IT departments commonly refer to any non-approved IT activity as “shadow IT”, which is picking up velocity due to the accessibility and ease of cloud applications. Source: Stratecast and McAfee Sound familiar?
- 11. © 2016 TeraGo Networks Inc. 11 Time to take a quick poll…
- 12. © 2016 TeraGo Networks Inc. 12 Business and IT need to work more closely - and faster 1. Technology decisions don’t have to take months of analysis and planning. But neither should they be made in isolation. 2. Need a common language between the business and IT – a shared plan and vision of the digital future. 3. A simple visual model is the easiest way to get everyone on board. The goal is to quickly set the direction, not the destination, so work can start quickly. Source: LinkedIn User David Reiss
- 13. © 2016 TeraGo Networks Inc. 13 BYOD, Data Control, Data Loss, and Enforcing Security Policies are key factors that obstruct confidential information management in companies. Control Data Loss BYOD Security Information grows. More volume. Shared more. The exchange of documentation through “public clouds” increases. More document sharing through mobile devices, especially BYOD. Data protection and privacy regulations become more strict. ½ of firms supporting BYOD report data breaches. Sources: Symantec & PwC
- 14. © 2016 TeraGo Networks Inc. 14 Corporate BYOD security mechanisms are weak as more and more critical documents are leaving the security perimeter of the company to locations and devices outside of IT Department’s control. Sources: BMC Software
- 15. © 2016 TeraGo Networks Inc. 15 Left to the personal device, employees will draw on “Shadow IT” and use the easiest means available to meet share their files. Sources: Osterman Research Inc.
- 16. © 2016 TeraGo Networks Inc. 16 These data breaches have a wide array of ramifications to your business, beyond financial losses as well. Sources: Symantec, PwC, Network Computing.com
- 17. © 2016 TeraGo Networks Inc. 17 Current and former employees are among the most common estimated source of security incidents Sources: Symantec, PwC, Network Computing.com
- 18. © 2016 TeraGo Networks Inc. 18© 2016 TeraGo Networks Inc. 29 September 2016 TeraGo Cloud Drive A simple, secure data storage and collaboration service that enables workforce mobility, Bring-Your-Own-Device, and collaboration while maintaining IT control.
- 19. © 2016 TeraGo Networks Inc. 19 TeraGo Cloud Drive overview Supported OS A simple, secure data storage and collaboration service that enables workforce mobility, Bring-Your-Own-Device, and collaboration while maintaining IT control. • Meets Enterprise security standards for data management. • Equipped to adopt corporate IT policies and controls. • Supports file versioning and synchronization for on major platforms. • Deployed and protected by TeraGo Tier 3 datacenters in Canada. • Sync across laptops, desktops, mobile devices & servers • Sync multiple folders and pre-existing folders • File versioning • Integration support - AD and LDAP Single- Sign On, and Microsoft Outlook • Source-based AES encryption of data at- rest, in-flight • 2-factor authentication for file invitations • Device lock and wipe tools • Multi-profile support: one desktop, many users Feature highlights:
- 20. © 2016 TeraGo Networks Inc. 21 TeraGo Cloud Drive vs The Competition
- 21. © 2016 TeraGo Networks Inc. 22 Value for the IT Manager Full Multi- Tenancy Support with emphasis on customer segregation Ability deploy and customize their own IT policies to corporate requirements Simple integration into existing IT infrastructure Multi-Device and App support on all major platforms All data resided in TeraGo Tier 3 Canadian Data Centers Leading Security Features
- 22. © 2016 TeraGo Networks Inc. 23 Value for the Chief Security Officer Source-based encryption Encrypting your files before they are sent to the cloud. This in addition to TLS/SSL in-transit encryption. Private encryption key management Control your encryption keys exclusively, preventing provider from accessing your files when stored in the cloud. Password policy enforcement Ability to enforce use of strong passwords and expiration period on users. Allows administrators to set password policies to ensure rotational passwords are used, reducing the chance for impersonation. 2-factor authentication Ability to require 2-factor authentication (via email) for account/device activation as well as shared links access. Data integrity checks Preventing ‘man in the middle’ attacks and file tampering using hashes or fingerprinting such as the SHA-1 standard. Physical Security Data is fully protected in TeraGo Tier 3, SSAE16 Compliant Data Centers with 24/7 video monitoring and manned security.
- 23. © 2016 TeraGo Networks Inc. 24 Value for the End-User Self- Provisioned Collaboration Workspace Ability to collaborate externally, with appropriate security controls Work Anywhere Sync files from laptops, phones, and tablets via agents and mobile apps Retain all synced files from current and past users Large file support (no limit on individual file size) Built-in version control, eliminate need to save multiple files
- 24. © 2016 TeraGo Networks Inc. 25 Time to take a quick poll…
- 25. © 2016 TeraGo Networks Inc. 26 Q&A
- 26. © 2016 TeraGo Networks Inc. 27 Let’s Connect! @TeraGo_Netwo rks TeraGo bit.ly/2du5L5e www.terago.c a 1.866.TERAGO. 1
Editor's Notes
- Your employees – and your company data – are on the go every day. As a result, your employees are relying on the use of 3rd party online services without IT approval – that is Shadow IT in your own organization. That’s some risky business. Where in the world is your Corporate Data? With TeraGo Cloud Drive we are giving you back control of your most valuable asset, your data. In this webinar you will learn about: How Shadow IT is picking up velocity due to the accessibility and ease of cloud applications Consequences of weak corporate security mechanisms How to give your IT department control of your data and its’ security
- The cloud is challenging every aspect of how organizations deal with user file storage, collaboration, office storage and data protection Organizations are now looking for smarter, less expensive tools that make them more agile IT-as-a-Service providers Anymore, users are looking for apps and cloud-integrated services that redefine both economics and service levels in the enterprise
- Shadow IT is a term often used to describe information-technology systems and solutions built and used inside organizations without explicit organizational approval. It is also used, along with the term "Stealth IT", to describe solutions specified and deployed by departments other than the IT department.
- http://blog.caspio.com/paas-in-action/transform-shadow-it-into-innovation-using-caspio/
- Company data is moving outside the corporate firewall at a rapid pace, and that trend is only going to continue. IT managers need to maintain control of that data anywhere, and at all times. http://thumbnails-visually.netdna-ssl.com/the-nightmare-of-securing-your-unstructured-data-in-the-era-of-the-borderless-enterprise_519ea836dc271_w1500.png
- Capabilities include : Two-factor authentication that provides strong controls on who can access the service Remote data shredding to ensure there no possibility of data getting into the wrong hands after the loss of a device Strong controls on passwords Audit trails to ensure compliance Admin-defined policies on what can be uploaded and shared And– the best approach to managing your encryption keys – you generate and own your keys, no 3rd party is involved in any aspect of the encryption process Source-based encryption: Encrypting your files before they are sent to the cloud. This in addition to TLS/SSL in-transit encryption. Private encryption key management: The ability to control your encryption keys exclusively, preventing service provider staff and other 3rd parties from accessing your files when stored in the cloud. Password policy enforcement: Ability to enforce use of strong passwords and password expiration period on users. 2-factor authentication: Ability to require 2-factor authentication (via email) for account/device activation as well as shared links access. Data integrity checks: Preventing ‘man in the middle’ attacks and tampering with your files by ensuring that the data that arrived in the cloud is the same data that left your device. This is typically done using hashes or fingerprinting such as the SHA-1 standard. Password Policy & Strength Enforcement – allows administrators to set password policies to ensure rotational passwords are used over time, reducing the opportunity for impersonation. Malware Detection & Prevention Data Loss Prevention Software (DLP) http://www.ctera.com/products/technology/end-to-end-security
- IT Manager Ability to choose vendor and management services to integrate into existing IT infrastructure Key Value Propositions: Toolset for internal data management; seamless integration into existing environment; ability to manage/monitor usage
- Corporate Security Officer Ability to accept/reject IT services based on adherence to corporate security policies Key Value Propositions: Ability to protect corporate IP information via encryption; prevent unauthorized 3rd party access; ability to destroy data on lost/stolen devices Source-based encryption: Encrypting your files before they are sent to the cloud. This in addition to TLS/SSL in-transit encryption. Private encryption key management: The ability to control your encryption keys exclusively, preventing service provider staff and other 3rd parties from accessing your files when stored in the cloud. Password policy enforcement: Ability to enforce use of strong passwords and password expiration period on users. 2-factor authentication: Ability to require 2-factor authentication (via email) for account/device activation as well as shared links access. Data integrity checks: Preventing ‘man in the middle’ attacks and tampering with your files by ensuring that the data that arrived in the cloud is the same data that left your device. This is typically done using hashes or fingerprinting such as the SHA-1 standard. Password Policy & Strength Enforcement – allows administrators to set password policies to ensure rotational passwords are used over time, reducing the opportunity for impersonation. Malware Detection & Prevention Data Loss Prevention Software (DLP) http://www.ctera.com/products/technology/end-to-end-security