Issue link: https://insights.oneneck.com/i/1458399
CHAPTER 2 Security Challenges in Hybrid Clouds 19 These materials are © 2020 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. » SaaS: SaaS vendors are primarily responsible for the security of their platform, which includes physical security, infrastruc- ture, and application security. These vendors do not own the enterprise data or assume responsibility for how enterprises use the applications. As such, the enterprise is responsible for security that would prevent and minimize the risk of malicious data exfiltration, accidental exposure, or malware insertion. Cloud security refers to the efforts of securing data, applications, and infrastructure intrinsic to the use of cloud computing — including policies, technologies, and controls. As a company expands its digital footprint across the hybrid cloud, including private and public cloud environments and SaaS applications, the responsibility for securing data, applications, and infrastructure changes, but regardless of the platform used, the enterprise will always be responsible for ensuring the security of its own data. In order to safely enable applications and their associated data, IT security must be confident that its cloud vendors have imple- mented the appropriate security measures to keep your applica- tions and data secure. To compensate for what cloud vendors do not secure, an organization must also have the right tools in place to manage and secure the risks effectively in order to keep their data secure. These tools must provide visibility into activity within SaaS applications, detailed analytics on cloud and SaaS usage to prevent data risk and compliance violations, context-aware policy controls to drive enforcement and quarantine cloud workloads if FIGURE 2-1: Shared security responsibility across private, public, and SaaS cloud services.