Digital government

1. Tam Tran
Security Consultant

2. 2
© Fortinet Inc. All Rights Reserved.
Agenda
Digital Government – CloudSecurity
Challenges
1 Digital Government – CloudEnablement
2
3 Cloud Security Solutions

3. Digital Government – Cloud
Enablement

4. 4
© Fortinet Inc. All Rights Reserved.
Government as a Platform
Digital Government – Cloud Enablement

5. 5
© Fortinet Inc. All Rights Reserved.
Digital Government Traditional Infrastructure
DC CORE
STANDBY PARTNER
MGMT
Web App DB Infra
OPER-
MGMT
UTL
SAN
Web
App/
DB
Proxy
INTERNET IN
Internet
Client
MOF
Backbone
VDI
WAN
Internet
(VNPT,FPT,Viettel)
Leased Line
/ISP
PARTNER
DR CORE
Wired
User
WiFi
User
LAN
SAN
INTERNAL
MOF
Backbone
Internet LL & ISP
IT Support
Branch
Partners
DC
Site
DR
Site
Employee
INTERNET OUT
VDI
Web App DB Infra
OPER-
MGMT
Web
App/
DB
IS
N
DWDM
Internet
WAN INTERNET IN
Internet
Client Partners
Branch
Current Network

6. Users
Devices
Home
Travel
Branch
Campus
Factory
Off Network
On Network
Manage Risk Automate Operations
Home
Edge
6
© Fortinet Inc. All Rights Reserved.
The New Normal for Government IT infrastructure
Private
Cloud
Public
Cloud
WAN
Edge
Cloud
Edge
Identity
Edge
Endpoint
Edge
DC
Edge

7. Accelerating DemandforCloud
7
© Fortinet Inc. All Rights Reserved.
The New Normal
Cloud Native
DevOps Methodologies
Remote Access no longer
an afterthought

8. Blockersto
Cloud
Adoption
C
o
S
m
e
A
c
p
u
u
l
d
i
r
a
i
i
t
t
n
y
c
e
8
© Fortinet Inc. All Rights Reserved.

9. Digital Government – Cloud
Security Challenges

10. Cloud Security Report 2021
10
© Fortinet Inc. All Rights Reserved.

11. Digital
Innovation is
Also Causing
IncreasedRisk
Cyber threats
take advantage
of the disruption
Digital
Attack
Surface
As the perimeter expands, billions
of “Security Edges” are formed
Sophisticated
Threats
Breach and ransomware incidents
continue to increase
Ecosystem
Complexity
Too many vendors and too many
alerts, not enough skilled people
Compliance
Global, country, province, industry,
and government regulation
11
© Fortinet Inc. All Rights Reserved.

12. “SD-branch represents a more holistic view
of all the network and security
functions that are needed at enterprise
datacentres, cloud and branch office sites. ”
– IDC 2019
CloudAdoption IncreasesAttack Surface
Public Cloud
V
M
“Through 2025, 99% of
cloud security failures will
be the customer’s fault.”
Gartner – A Public Cloud Risk Model:
Accepting Cloud Risk Is OK, Ignoring
Cloud Risk Is Tragic, 25, February 2019
“By 2021, 90% of web-enabled
applications will have more surface
area for attack in the form of
exposed APIs rather than the UI, up
from 40% in 2019.” –
Gartner – API Security- What you need to do to
protect your APIs, August 2019
12
© Fortinet Inc. All Rights Reserved.

13. Container Security
Skills Gap
Email Top Vector
TargetedAttacks
Misconfiguration
Identity Mngt.
Zero Trust
Rise of SASE
13
© Fortinet Inc. All Rights Reserved.
GovernmentCloudSecurityTrends

14. Global Shortage of Skilled Security Professionals
Gap in Cybersecurity Professionals By Region
NORTH AMERICA
~498K LATIN AMERICA
~136K
EUROPE,
THE MIDDLE EAST, AFRICA
~142K
ASI PACIFIC
~2.14M
GLOBAL
~2.93M
14
© Fortinet Inc. All Rights Reserved.

15. Cloud Security Solutions

16. 16
© Fortinet Inc. All Rights Reserved.
You Started With Silos: Best-of-Breed Security Tools
SWG
EFW
DLP
Data
Classifi-
cation
EDR
EPP
MTD
CASB
CWPP
WAF IDPS
ZTNA
Email
Security
CIEM DRM
Email
Users
Applications
Mobile/
Tablet
PC/
Laptop
Server/
VM
Saas, Iaas,
Paas
Processes
Robots
Data
Network
loT/OT
Network

17. Then You Integrated All of Them With SOC Solutions
SWG
EFW
DLP
Data
Classifi-
cation
MTD
EPP
EDR
CASB
CWPP
WAF IDPS
ZTNA
Email
Security
CIEM DRM
Email
Users
Applications
Mobile/
Tablet
PC/
Laptop
Server/
VM
Saas, Iaas,
Paas
Processes
Robots
Data
Network
loT/OT
Network
SIEM SOAR
Aggregation Point
17
© Fortinet Inc. All Rights Reserved.

18. Integrate Products Together and Into a Cybersecurity
Mesh Architecture
SWG
EFW
DLP
Data
Classifi-
cation
MTD
EPP
EDR
CASB
CWPP
WAF IDPS
ZTNA
Email
Security
CIEM DRM
18
© Fortinet Inc. All Rights Reserved.

19. Application Security
NGFW
Segmentation
VPN
IPS
App Control
Network Security
Configurations
AccountActivity
Traffic Analysis
Data Security
Compliance
Platform Visibility & Control
Multi LayerCloudSecuritySolutions
Security as
a Service
Virtual
Machine
Compliance
WebApplications
Vulnerabilities
Bot Security
API Security
V
M
Private Public SaaS
19
© Fortinet Inc. All Rights Reserved.

20. 20
© Fortinet Inc. All Rights Reserved.
Adaptive CloudSecurityValueAdd
Public Cloud Private Cloud
HEADQUARTERS
Fortinet Security
IPS VPN
NGFW Segmentation
App
Control
OCI Advanced Security
(NGFW, IPS, Application Control, …)
Automation
(Scale In/Out, Scipts, Lambda …)
Native Integration
(Cloud Formation, Terraform, ARM,
Dynamic Objects …)
Multicloud Support
(AWS, Azure, GCP, Oracle, Alibaba,
VNG Cloud…)
Secure Connectivity
(Secure SDWAN, IPSEC, Security
Hub, …)
Single Pane of Glass
(Mgmt, Reporting & Troubleshooting)
box
SaaS Application
Summary