Security News > 2023 > February > Application and cloud security is a shared responsibility

Cloud and application security is everyone's responsibility - there isn't much of a choice.
Many enterprise cloud customers make the mistake of believing that they are free from obligation when it comes to application security, and they deploy the apps in the cloud, exposing themselves to security gaps at the seam of enterprise and cloud vendor infrastructures.
Comprehensive security has always required the enterprise to be responsible and proactive in their security defenses, but the fact of the matter is that enterprises are really forced to share in the responsibility.
Cloud and application security encompasses the entire ecosystem of people, processes, policies and technology that serve to protect the data that operates within, but security for things like data classification, network controls and physical security need clear owners.
The shared responsibility model for cloud security provides a clear breakdown of who should be doing what.
Today's cloud and application security providers have so many services and figuring out how to configure these services or understanding their security perimeters can be incredibly challenging, as it requires some special skills and training.
News URL
https://www.helpnetsecurity.com/2023/02/16/application-cloud-security-shared-responsibility/
Related news
- Balancing cloud security with performance and availability (source)
- Avoiding vendor lock-in when using managed cloud security services (source)
- Why multi-cloud security needs a fresh approach to stay resilient (source)
- Cloud security gains overshadowed by soaring storage fees (source)
- Google Acquires Wiz for $32 Billion in Its Biggest Deal Ever to Boost Cloud Security (source)
- Google to purchase Wiz for $32 billion in cloud security play (source)
- Cloud security explained: What’s left exposed? (source)
- Oracle Cloud security SNAFU latest: IT giant accused of pedantry as evidence scrubbed (source)
- How CISOs can balance security and business agility in the cloud (source)
- Cloud providers aren’t delivering on security promises (source)