Security News > 2021 > May > Secure your cloud: Remove the human vulnerabilities
A strong case can be made that shoring up defenses requires "Automating out" the weakest link - i.e., humans - from any cloud that companies are entrusting with their data.
In "Automating out the weak link," the ability of superusers or IT administrators - or of bad actors who have gained access to valid admin credentials - to manually interfere with sensitive data becomes non-existent, because human interaction is eliminated.
The best way to secure a network, according to the zero trust framework, is to assume absolutely no level of trust.
Suppose a customer wanted the cloud vendor to collect information on some of their data.
In a zero-touch environment, the cloud vendor has no direct access to the data.
They'd need to create some kind of app that could be pushed into the production environment to collect the information from the servers in a secure automated fashion, with no human, hands-on involvement with the sensitive data.
News URL
http://feedproxy.google.com/~r/HelpNetSecurity/~3/9Hf2EKrdBjg/