So we started off the skill by stating that people and data are the primary
focus of our
responsibility as customers.
Seeing that provider covers the whole different spectrum of everything behind
the scenes for
us.
Now as security specialists, we want to make sure that we're still keeping that
people
and data focused within the as a service platform taken care of.
Now there are a couple of different areas that we really hone in on and yes, it
is data
and people, but here are a couple of ways that we actually do that. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
and people, but here are a couple of ways that we actually do that.
Starting off with our folks inside the organization, we have user behavior
monitoring where we
are tracking and analyzing user activities to detect unusual and or suspicious
behavior
that could indicate compromised accounts or insider threats, you know, like un
authorized
data access or log in from unusual locations.
So even though we don't actually have ownership or responsibility of the
applications within
our software as a service platform, we still need to make sure that we're WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
our software as a service platform, we still need to make sure that we're
holding the CIA
triad to its core by making sure that we're monitoring all that user activity.
And it goes even further when we're looking at data protection because we're
going to monitor
data traffic to and from our SaaS applications, detecting any anomalies like
data exfiltration
or unauthorized access attempts and protecting sensitive information stored in
or transmitted
inside of our SaaS platforms.
Now it may seem like a lot to be able to keep track of in terms of the WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
Now it may seem like a lot to be able to keep track of in terms of the
responsibility that
we have inside of software as a service and based on the limited availability
that we
have to applications and beyond, don't get overwhelmed because there are
different tools
out there to be able to help us do this inside of that Cisco platform.
Now what I have here on the screen, as you can see below right there, is the
Cisco Secure
Network Analytics and this used to be known as "StuffWatch Enterprise" and this WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
Network Analytics and this used to be known as "StuffWatch Enterprise" and this
is just one
of the tools that I mentioned in the previous skill that's been revamped and re
-tooled to
focus specifically on software as a service.
Now this is just a demonstration from the actual Cisco side of the house and as
you can see
up on the actual address bar right here and I can put this link in below this
actual
video.
I wanted to point out a couple of different things here as it lines up with
securing the people
and data that are the responsibility of the software as a service platform in WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
and data that are the responsibility of the software as a service platform in
our structure.
Now I do want to point out that Cisco Secure Network Analytics is not a seam or
a sore.
This actually plays into the bigger scope that is Cisco and provides data into
Secure X.
Now as we start to go through here, we're going to take a look at our dashboard
and see
that we have alarms based on the actual host themselves and different alarm
types.
This looks like your standard alert platform if you're familiar inside of that WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
This looks like your standard alert platform if you're familiar inside of that
cybersecurity
realm.
But as you notice, we have the alarm host set up to be able to identify
different concerned
areas with ironically concerned indexes our first one and if you notice here we
have
policy violation.
Now I do want to point that out specifically because as a responsibility of us
for people
and data inside of software as a service, it's policy is going to be driving a
lot of what
we do inside of our area of focus for security and being able to align a secure WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
we do inside of our area of focus for security and being able to align a secure
platform,
let's say through network analytics to say are these technical controls that we
're implementing
aligning with our administrative controls is pretty handy.
One of the other responsibilities that we have inside of software as a service,
especially
in our Cisco cloud platform is we're wanting to make sure that we have
visibility into actual
software usage.
And that requires us to hone in on shadow IT or unsection SaaS applications WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And that requires us to hone in on shadow IT or unsection SaaS applications
being used
by employees because let's say that we have a policy and effect that tells our
employees
that they can only use so many types of programs that are on a white list.
And for whatever reason, if an application is installed that processes data and
appropriately
according to our policy, we would be able to use network analytics to be able
to configure
a policy to go through and check for, let's say like data hoarding, you can see WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
a policy to go through and check for, let's say like data hoarding, you can see
that,
make sure I can zoom in for you real quick.
And part of our policy is making sure that we're only allowing approved SaaS
applications
that are in line not only with our organization, but also with the provider of
our actual cloud
platform and infrastructure.
Now given that a lot that we do inside of our software as a service platform,
there's
a lot of API security concerns that take effect because like we mentioned, we WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
a lot of API security concerns that take effect because like we mentioned, we
're not able
to control anything past the applications because we're just focused on the
actual people
in data.
And the next portion of the skill, we're actually going to be honing in on API
security and
making sure how unauthorized access is prevented inside of our SaaS operation.