Most organizations already have some level of cloud infrastructure services (IaaS, PaaS, FaaS, or serverless) and as more workloads migrate to and are built on the cloud, the top cloud security concern for any organization is a data breach.
However, many data breaches can be the result of misconfigurations and mistakes made by Cloud Service Providers (CSPs).
Leveraging native CSP security controls is essential, and, for some cloud implementations, it is sufficient to manage public cloud workload risk. However, for most enterprises, these controls alone do not adequately address the core aspects of cloud security: audit, visibility, protection, detection and automation.
This white paper investigates why aligning cloud complexity with organizational risk appetite is key to determining when and how to augment native CSP security controls.