Intelligent CIO North America Issue 36 | Page 42

FEATURE : CYBERSECURITY

ANY SOLUTION NEEDS TO RECOGNIZE THE CHALLENGE FACED BY EVERYONE INVOLVED .

multiple layers including infrastructure , networks , VMs , containers , serverless functions , data , APIs , web apps , code , open-source libraries and much more .
The payoff from embedding security early in the application life cycle is huge in cutting the risks in production .
However , for it to be successful , security teams need to clearly understand how their organization builds and deploys code and applications in the cloud so they can identify where it is least disruptive to inject security into a CI / CD pipeline .
Eliminating blind spots is crucial and can be achieved through ensuring comprehensive visibility over cloud environments . This starts with discovering cloud assets and identifying and fixing misconfigurations and vulnerabilities . But there also needs to be constant vigilance to track strange or suspicious behaviors that suggest a security compromise .
Research keeps on telling us there remains too many unpatched vulnerabilities in cloud environments but a crusade to fix these will not be enough to prevent threats . This means applying threat prevention tactics that block zero-day attacks and when there is a breach
42 INTELLIGENTCIO NORTH AMERICA www . intelligentcio . com