Despite the substantial benefits of the cloud, many financial services organizations are uneasy about cloud services. Your business runs on trust, but that trust can be quickly lost if customer data is compromised due to a security breach. You also need to make sure that customer data in the cloud is handled properly and protected in order to meet various regulatory requirements including GLBA, PCI DSS, and state and national privacy laws. And there is a risk of employees knowingly or unknowingly uploading sensitive data to the cloud – exposing your company’s intellectual property. With Skyhigh you don’t have to make tradeoffs – take full advantage of all the cloud has to offer without compromising the security, compliance, and governance of corporate data.
The average financial services company uses 844 cloud services, many of them unknown to IT. Skyhigh discovers all cloud apps in use and provides detailed risk ratings for each service, enabling you to quickly understand the risk to your organization and how it compares with your peers in the industry.
Skyhigh enforces policies on data going to the cloud to comply with GLBA, PCI DSS, and various state and national privacy and data residency laws. You can select the best enforcement action (encryption, tokenization, data loss prevention, and contextual access control) based on your policies. For example, inspect and block uploads to high risk file sharing services if they contain sensitive data based on your DLP policies or encrypt all customer data stored in SaaS applications with enterprise-managed keys.
Skyhigh’s behavioral analysis engine leverages machine learning to identify patterns of usage that may appear innocuous but actually signify an insider threat. You get a complete picture of user behavior across all cloud services to identify and stop inadvertent or malicious loss of sensitive data.
Many companies block certain high-risk services as defined by their security and compliance policies. However, these policies are inconsistently applied due to the introduction of new cloud service URLs, inconsistent policies across firewalls and proxies, and exception sprawl. Skyhigh identifies these policy enforcement gaps and leverages your existing firewall and proxy infrastructure to close them – via user coaching, allowing partial access such as read-only access, and blocking.
Manage “shadow IT’ by enforcing coarse and granular access control policies leveraging your existing firewalls and proxies. For example, block access to high-risk services or educate employees to use company-sanctioned services or enable read-only access to social media sites.
Enable IT-sanctioned cloud services by implementing data security controls. Encrypt your data with enterprise-controlled keys or tokenize your data before it is uploaded to the cloud – making data indecipherable to any third parties or inquiring government agencies. Leverage FIPS 140-2 compliant encryption libraries to ensure the strength of encryption.
This is the only report on how employees at banks, insurance companies, credit unions, credit card companies, and investment funds, are using the cloud, including incidence of insider threats and number of stolen login credentials.Download Now